A security administrator is evaluating enterprise security controls to classify them by control category. Which of the following security measures are classified as technical controls? (Select TWO.)
- Implementing full-disk encryption on corporate laptops using AES-256Cevap
- BConducting mandatory annual security awareness training for all employees
- Configuring firewall access control lists (ACLs) to block unauthorized network trafficCevap
- DStationing security guards at the main entrance of the corporate building
Cevap
Implementing full-disk encryption on corporate laptops using AES-256 and configuring firewall access control lists (ACLs) to block unauthorized network traffic are technical controls.
Full-disk encryption and firewall access control lists (ACLs) are both technical controls because they are implemented through computer hardware, software, or firmware mechanisms. Full-disk encryption uses software/hardware cryptographic algorithms to protect data at rest, while firewall ACLs use automated network software logic to filter incoming and outgoing network traffic.
Adım Adım Çözüm
Anahtar Kavram
Technical Security Control Categories