Chapter 5: Security Controls

Question 1

{Blank} are procedures and mechanisms that an organization puts in place to address security risks in some manner.

Answer 1

Security controls

Question 2

Applying multiple overlapping controls to achieve the same objective.

Answer 2

Defense in Depth

Question 3

{Blank} are designed to stop a security issue from occuring in the first place,

Answer 3

Preventive controls

Question 4

{Blank} identify potential security breaches that require further investigation.

Answer 4

Detective controls

Question 5

{Blank} remediate security issues that have already occured.

Answer 5

Recovery controls

Question 6

Technical controls use technology to achieve security objectives. What other terms describes the same type of control.

Answer 6

Logical controls

Question 7

{Blank} include the processes that you put in place to manage technology in a secure manner. These include many of the tasks that security professionals carry out each day, such as user access reviews, log monitoring, background checks, and security awarness training.

Answer 7

Administrative controls

Question 8

{Blank} are those that impact the physical world. Locks are used to keep people out of buildings, cameras to detect unauthorized intrustions, and security guards to monitor activity in out facilities .

Answer 8

Physical controls

Question 9

What can security controls be classified by?

Answer 9

• Purpose
• Mechanism of action

Question 10

Tonya is concerned about the risk that an attacker will attempt to gain access to her organizations’s database server. She is searching for a control that would blockthe attacker’s attempt to gain access. Which type of security control is she seeking to implement?

A. Technical
B. Detective
C. Recovery
D. Preventive

Answer 10

Technical

Question 11

Tonya evaluated all of the options available to her for protecting her database and decided to implement strong encrytion to protect the contents of the data in her database. Which mechanism of action is she using?

A. Technical
B. Administrative
C. Preventive
D. Physical

Answer 11

Technical

Question 12

What are the three purpose categories for security controls?

Answer 12

• Preventive controls
• Detective controls
• Recovery controls

Question 13

What are the three mechanism of action categories for security controls?

Answer 13

• Technical controls
• Administrative controls
• Physical controls