Soru

Zorluk: OrtaSecurity Control Categories and Types

Following an assessment of remote access risks, a network administrator mandates that all system administrators must use hardware security keys to perform multi-factor authentication when logging into administrative portals. Which of the following combinations correctly identifies the control category and functional control type of the hardware security keys?

  1. Technical control executed as a preventive functional typeCevap
  2. B
    Technical control executed as a detective functional type
  3. C
    Operational control executed as a corrective functional type
  4. D
    Managerial control executed as a compensating functional type

Cevap

Technical control executed as a preventive functional type
Hardware security keys are technical (logical) controls because they rely on hardware and cryptographic software mechanisms to verify identity. They function as a preventive control type because they block unauthorized access to systems before an intruder can gain entry.

Adım Adım Çözüm

1
Determine the control category by evaluating how the control is implemented.
Hardware security keys rely on technology, cryptography, and automated software/hardware enforcement rather than administrative policies or human operational procedures, classifying them as a Technical control.
Technical controls (also known as logical controls) use hardware, software, or firmware mechanisms to enforce security rules.
2
Determine the functional control type by analyzing the objective of the mechanism.
Multi-factor authentication via hardware security keys stops unauthorized users from gaining access to administrative portals before any unauthorized access occurs, classifying it as a Preventive control type.
Preventive controls aim to deter or prevent security incidents from happening.

Anahtar Kavram

Security Control Categories and Functional Types
Tahmini Süre:1m 0s
Bu soruyu puanla