Soru

Zorluk: OrtaSecurity Program Elements and Physical Access Controls

During a security assessment of a financial institution, a network administrator reviews the measures implemented to protect network infrastructure. The measures include installing biometric door locks on the main data center, deploying TACACS+ for switch administration authentication, implementing Port Security on access switches, and conducting quarterly user security awareness campaigns. Which of these measures is classified specifically as a physical access control?

  1. Installing biometric door locks on the main data center entryCevap
  2. B
    Deploying TACACS+ for centralized switch management authentication
  3. C
    Implementing Port Security to restrict unauthorized switch port connections
  4. D
    Conducting quarterly security training campaigns on identifying phishing attacks

Cevap

Installing biometric door locks on the main data center entry
Installing biometric door locks directly controls physical access to the building and server room facilities housing network devices. Physical security controls include physical barriers, door locks, mantraps, security guards, and surveillance cameras that prevent unauthorized physical entry.

Adım Adım Çözüm

1
Categorize each listed security measure into physical, technical/logical, or administrative program elements.
Biometric door locks limit physical proximity to hardware. TACACS+ and Port Security manage network interface access electronically. Security awareness training educates personnel.
Security controls are broadly classified into physical controls, technical controls, and administrative/policy elements.
2
Identify which measure specifically restricts physical access to network equipment.
Biometric door locks prevent unauthorized individuals from physically entering the room containing servers and network devices.
Physical access controls prevent physical touch, intrusion, or theft of physical IT assets.

Anahtar Kavram

Classification of Security Controls (Physical Access Controls vs. Technical Access Controls and Security Program Elements)
Bu soruyu puanla