Examkin

Soru

Zorluk: KolaySecurity Control Categories and Types

A security administrator is evaluating existing security measures across an enterprise environment to ensure appropriate control categorization. Which of the following represent technical security controls? (Select TWO.)

  1. Firewall rules restricting unauthorized inbound port trafficCevap
  2. Database disk encryption applied to sensitive files at restCevap
  3. C
    An enterprise security policy mandating annual security training
  4. D
    A biometrically controlled lock installed on the server room door

Cevap

The technical security controls are firewall rules restricting unauthorized inbound port traffic and database disk encryption applied to sensitive files at rest.
Technical controls rely on software, hardware, or firmware mechanisms to automatically safeguard systems and data. Firewall rules enforce access control at the network level using software logic, and disk encryption uses cryptographic algorithms to protect data at rest.

Adım Adım Çözüm

1
Identify the core definition of technical controls
Technical controls (also known as logical controls) are implemented through computer hardware, software, or firmware mechanisms.
Control categorization relies on distinguishing technology-driven mechanisms from policies, operational procedures, and physical barriers.
2
Evaluate each control option against the definition
Firewall rules and data encryption execute via system hardware/software logic, while security policies are managerial oversight documents and door locks are physical security mechanisms.
Distinguishing between technical, managerial, operational, and physical categories ensures accurate control assessment.

Anahtar Kavram

Technical security controls use software, hardware, or firmware technology to protect system resources and data integrity.
Bu soruyu puanla

Konular

Security Control Categories and Types

Bu konudan daha fazla soru