Examkin

Question

Difficulty: EasySecurity Control Categories and Types

A security administrator is evaluating existing security measures across an enterprise environment to ensure appropriate control categorization. Which of the following represent technical security controls? (Select TWO.)

  1. Firewall rules restricting unauthorized inbound port trafficAnswer
  2. Database disk encryption applied to sensitive files at restAnswer
  3. C
    An enterprise security policy mandating annual security training
  4. D
    A biometrically controlled lock installed on the server room door

Answer

The technical security controls are firewall rules restricting unauthorized inbound port traffic and database disk encryption applied to sensitive files at rest.
Technical controls rely on software, hardware, or firmware mechanisms to automatically safeguard systems and data. Firewall rules enforce access control at the network level using software logic, and disk encryption uses cryptographic algorithms to protect data at rest.

Step-by-Step Solution

1
Identify the core definition of technical controls
Technical controls (also known as logical controls) are implemented through computer hardware, software, or firmware mechanisms.
Control categorization relies on distinguishing technology-driven mechanisms from policies, operational procedures, and physical barriers.
2
Evaluate each control option against the definition
Firewall rules and data encryption execute via system hardware/software logic, while security policies are managerial oversight documents and door locks are physical security mechanisms.
Distinguishing between technical, managerial, operational, and physical categories ensures accurate control assessment.

Key Concept

Technical security controls use software, hardware, or firmware technology to protect system resources and data integrity.
Rate this question

Topics

Security Control Categories and Types

More questions from this topic