Section 2: Identify Security control concepts

Question 1

Security Operations Center (SOC)

Answer 1

A location where security professionals monitor and protect critical information assets

Question 2

Technical (Logical) Control

Answer 2

A category of security control that is implemented as a system (Hardware, Software, Firmware)

Question 3

Operational Control

Answer 3

A category of security control that is implemented primarily by people instead of systems

Question 4

Managerial controls

Answer 4

A category of security control that provides oversight of the Information System

Question 5

Detective control

Answer 5

Any control that may not prevent or deter access, but it will help identify and record any attempted or successful intrusion

Question 6

Corrective control

Answer 6

Controls that act as a way to eliminate or reduce the impact of an intrusion event.

Question 7

Physical control

Question 8

Compensating control

Answer 8

a type of security control that acts as a substitute for a principle control.