Quiz: AI Data Center Security & Weights Protection (Part 11)

10 questions from Part 11 of the guide. Score instantly; every explanation links to the chapter that derives the answer.

The organizing target for AI campus security design is…
the fence heightthe RAND Weights Security Level (SL1–SL5) you defend to — every control derives from the adversary tier you pickSOC 2 alonecamera count
Where does the guide say the supply-chain trust boundary should be drawn?
at the loading dockat the fab — provenance attested at every link, because dock-only inspection is blind to in-transit and upstream tamperingat the rack doornowhere; suppliers are trusted
The root-of-trust fork the guide describes is…
password vs biometrican auditable open silicon RoT (Caliptra/DICE class) vs a vendor-proprietary black box you must simply believeTPM vs no TPMhardware vs paper certificates
When does a workload actually need a hardware TEE (confidential computing)?
always — enable it everywherewhen there's a real third-party-trust problem: sovereign tenants, regulated data, or weights running on infrastructure you don't controlnever; TLS sufficesonly for cryptocurrency
The multi-tenancy isolation spectrum runs…
trusted vs untrustedbare-metal-per-tenant → VM-per-tenant → MIG-partitioned → vGPU/time-sliced — isolation strength traded against utilizationon-prem vs cloudencrypted vs plaintext
The network trust-boundary critique in the guide is that…
firewalls are obsoletea hardened north-south perimeter around a flat interior collapses on first breach — segment the interior around the weightsVPNs solve everythingeast-west traffic can't be inspected
The two-person-rule ladder for weight-bearing operations runs…
one admin, carefully chosenadvisory logging → mandatory dual-approval → dual-key cryptographic control, escalating with the SL targetoutsourced approvalsannual review only
The OT estate (BMS, SCADA, CDU controllers, BESS) needs…
nothing; it's air-gapped by defaultthe same security governance as IT — it's a cyber-physical attack surface that can throttle or damage the fleetantivirus on the workstationsonly physical locks
The compliance portfolio decision distinguishes…
paid vs free certificationsthe commercial baseline (SOC 2 + ISO 27001) from AI-specific and sovereign regimes layered above itUS vs EU onlyannual vs quarterly audits
The converged SOC argument is that…
three separate SOCs are cheaperIT, OT, and physical security under one incident commander is how you catch attacks that cross domainsSOCs are obsoletephysical security needs no monitoring

Check your understanding: Security