Security Controls

Question 1

Technical Controls

Answer 1

Technical controls → safeguards implemented using technology such as firewalls, intrusion detection systems, antivirus software, encryption, and multifactor authentication.

Question 2

Managerial Controls

Answer 2

Managerial controls → administrative safeguards focused on policies, procedures, risk management, and security governance such as security policies and risk assessments.

Question 3

Operational Controls

Answer 3

Operational controls → safeguards implemented through people and processes including security training, incident response procedures, and change management.

Question 4

Physical Controls

Answer 4

Physical controls → safeguards that protect physical assets such as locks, fences, security guards, cameras, and access control systems.

Question 5

Preventive Control Types

Answer 5

Preventive control types → controls that stop security incidents before they occur, including technical firewalls, managerial security policies, operational training, and physical locks.

Question 6

Deterrent Control Type

Answer 6

Deterrent control type → controls that discourage attacks such as warning banners, visible cameras, security guards, and posted policies.

Question 7

Detective Control Type

Answer 7

Detective control type → controls that identify incidents after they occur including intrusion detection systems, log monitoring, audits, and security cameras.

Question 8

Corrective Control Type

Answer 8

Corrective control type → controls that reduce the impact of incidents such as system patching, restoring backups, updating firewall rules, and account resets.

Question 9

Compensating Control Type

Answer 9

Compensating control type → alternative controls used when primary controls are not feasible, such as increased monitoring when encryption cannot be implemented.

Question 10

Directive Control Type

Answer 10

Directive control type → controls that guide behavior such as security policies, procedures, standards, and acceptable use policies.