Examkin

Soru

Zorluk: OrtaSecurity Program Elements and Physical Access Controls

A company is establishing operational guidelines to meet compliance mandates for its core data facility. The chief security officer highlights the necessity of administrative safeguards working in tandem with physical access mechanisms. Which initiative is properly classified as an administrative element of a security program?

  1. Mandating quarterly security awareness training sessions and formal clean-desk policies for all staffCevap
  2. B
    Deploying biometric fingerprint readers and mantrap vestibules at the entrance of the data hall
  3. C
    Configuring centralized AAA server authentication with TACACS+ to govern access to network switch consoles
  4. D
    Implementing dynamic port security on access switches to shut down ports upon unauthorized MAC detection

Cevap

Mandating quarterly security awareness training sessions and formal clean-desk policies for all staff is an administrative security program element.
The option specifying mandatory security awareness training and clean-desk policies represents an administrative security control. Administrative controls consist of policies, regulations, compliance guidelines, and security awareness programs designed to direct human behavior and govern organizational security operations.

Adım Adım Çözüm

1
Categorize the options into control categories: Administrative, Physical, and Technical (Logical).
Administrative controls include policies, procedures, and training programs. Physical controls include locks, biometrics, and physical barriers. Technical controls include ACLs, port security, and protocol authentication.
Security program elements are classified based on whether they regulate human behavior/policy (administrative), physical entry (physical), or software/hardware enforcement (technical).
2
Identify which choice represents administrative policy and human behavior governance.
Mandating security awareness training and enforcing clean-desk policies fall squarely under administrative management.
Administrative controls establish the rules of behavior, compliance monitoring, and organizational security awareness.

Anahtar Kavram

Classification of Security Program Elements (Administrative vs. Physical vs. Technical Controls)
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Security Program Elements and Physical Access Controls

Bu konudan daha fazla soru