Which of the following can be used to protect physical database appliances from damage in a server room? (Choose two.)

Protecting physical database appliances from damage within a server room primarily involves mitigating environmental threats. Overheating is a significant risk to electronic components, and cooling systems (e.g., HVAC, CRAC units) are essential for maintaining an optimal operating temperature, thereby preventing thermal damage and ensuring hardware longevity. Fire is another catastrophic threat; fire suppression systems (such as clean agent or pre-action sprinkler systems) are designed to extinguish fires quickly without damaging the electronic equipment, directly protecting the appliances from destruction.

A. Biometric access systems: This is a physical access control measure to prevent unauthorized personnel entry, not to protect against environmental damage like fire or heat.

B. Database control systems: These are software-based tools for managing database access and operations (logical security), which do not protect the physical hardware appliance.

D. Camera systems: Cameras are a detective and deterrent control for surveillance purposes; they record events but do not actively prevent physical damage from environmental hazards.

E. Key card systems: Like biometrics, this is a physical access control mechanism that restricts entry but offers no protection against environmental threats such as overheating.

1. National Institute of Standards and Technology (NIST). (2020). Security and Privacy Controls for Information Systems and Organizations (Special Publication 800-53

Revision 5).

Control PE-13 (Fire Protection): This control explicitly details the requirement for fire protection measures

including detection and suppression systems

to "prevent and mitigate damage to the system and facility." (Page 298).

Control PE-14 (Temperature and Humidity Controls): This control mandates maintaining temperature and humidity levels "within acceptable levels for the system" to prevent physical damage from environmental conditions. (Page 299).

DOI: https://doi.org/10.6028/NIST.SP.800-53r5

2. Massachusetts Institute of Technology (MIT) Information Systems and Technology (IS&T). (n.d.). Secure Hosting Environment.

The documentation for MIT's secure data center environment explicitly lists "Temperature and humidity controlled environment" and "Fire detection and suppression systems" as key features for protecting hosted equipment. This demonstrates the university-level best practice for physical hardware protection. (Section: "Features").

3. Stanford University IT. (n.d.). Data Center Services.

Stanford's description of its data center facilities highlights "Environmental Controls" as a core service

which includes "temperature and humidity monitoring" and "fire suppression systems" to ensure the physical safety and operational integrity of server hardware. (Section: "Features").