A security administrator is evaluating enterprise security controls to classify them by control category. Which of the following security measures are classified as technical controls? (Select TWO.)
- Implementing full-disk encryption on corporate laptops using AES-256Answer
- BConducting mandatory annual security awareness training for all employees
- Configuring firewall access control lists (ACLs) to block unauthorized network trafficAnswer
- DStationing security guards at the main entrance of the corporate building
Answer
Implementing full-disk encryption on corporate laptops using AES-256 and configuring firewall access control lists (ACLs) to block unauthorized network traffic are technical controls.
Full-disk encryption and firewall access control lists (ACLs) are both technical controls because they are implemented through computer hardware, software, or firmware mechanisms. Full-disk encryption uses software/hardware cryptographic algorithms to protect data at rest, while firewall ACLs use automated network software logic to filter incoming and outgoing network traffic.
Step-by-Step Solution
Key Concept
Technical Security Control Categories