Soru

Zorluk: KolaySecurity Control Categories and Types

A security administrator is evaluating enterprise security controls to classify them by control category. Which of the following security measures are classified as technical controls? (Select TWO.)

  1. Implementing full-disk encryption on corporate laptops using AES-256Cevap
  2. B
    Conducting mandatory annual security awareness training for all employees
  3. Configuring firewall access control lists (ACLs) to block unauthorized network trafficCevap
  4. D
    Stationing security guards at the main entrance of the corporate building

Cevap

Implementing full-disk encryption on corporate laptops using AES-256 and configuring firewall access control lists (ACLs) to block unauthorized network traffic are technical controls.
Full-disk encryption and firewall access control lists (ACLs) are both technical controls because they are implemented through computer hardware, software, or firmware mechanisms. Full-disk encryption uses software/hardware cryptographic algorithms to protect data at rest, while firewall ACLs use automated network software logic to filter incoming and outgoing network traffic.

Adım Adım Çözüm

1
Define technical security controls based on CompTIA Security+ standards.
Technical controls are security controls that are executed and enforced by computer hardware, software, or automated system logic.
Distinguishing technical controls from operational, managerial, and physical controls requires determining whether technological systems automate the enforcement.
2
Analyze each option provided in the scenario.
Full-disk encryption and firewall access control lists rely on system software and network hardware logic. Security awareness training relies on human behavior/policies, and security guards rely on physical personnel.
Evaluating each item isolates the measures implemented via computer technology.

Anahtar Kavram

Technical Security Control Categories
Bu soruyu puanla