19B: Administrative and Operational Controls

Question 1

The security approach to restricting availability of a resource to authorized users only.

Answer 1

Role Based Access Control

Question 2

The processes of planning, analysis, design, implementation, and maintenance that often govern software and systems development.

Answer 2

software development lifecycle (SDLC)

Question 3

A dynamic code analysis technique that involves sending a running application random and unusual input so as to evaluate how the app responds.

Answer 3

fuzzing

Question 4

The process and supporting technologies for tracking, controlling, and securing the organization’s mobile infrastructure.

Answer 4

mobile device management (MDM)

Question 5

The policy of preventing any one individual performing the same role or tasks for too long. This deters fraud and provides better oversight of the person’s duties.

Answer 5

job rotation

Question 6

Policies or configuration settings that limit a user’s access to resources.

Answer 6

time of day restrictions