Security Controls

Question 1

What are the three main security controls

Answer 1

Technical, Administrator, and Physical

Question 2

Administrative Controls

Answer 2

are mainly written by managers to create organizational policies to reduce the risk within companies. Some administrative measures are Annual Security Awareness Training, Annual Risk Assessment, Penetration Testing/Vulnerability Scanning, and Change Management.

Question 3

Technical Controls

Answer 3

Are those implemented by the IT team to reduce the risk to the business. These include Firewalls, Antivirus/Antimalware, Screen Savers, Screen Filters, IDS/IPS systems.

Question 4

Physical Controls

Answer 4

Are controls that can be touched. These include cable locks, laptop safe, Biometric Locks, Fences/Gates, Burglar Alarm, Fire Alarms, and many more.

Question 5

Preventative Controls

Answer 5

Are placed to deter any attack, examples are Disable User Accounts and Operating System Hardening.

Question 6

Deterrent Controls

Answer 6

Could be CCTV and motion sensing. Tip CCTV and motion sensors as deterrents.

Question 7

Detective Controls

Answer 7

Are used to investigate an incident that has happened and needs to be investigated; these are as follows CCTV and Log Files.

Question 8

Corrective Controls

Answer 8

Are the actions you take to recover from an incident. An example Fire Suppression System.

Question 9

Access Controls are

Answer 9

Identification, Authentication, Authorization

Question 10

Discretionary Access Control

Answer 10

Involves New Technology File System (NTFS) file permission used in Microsoft operating system. The user is only given the access that he/she needs to perform their job.

Question 11

Rule-Base Access Control means

Answer 11

A rule is applied to all people within a department.

Question 12

Hashing

Answer 12

Is data that is hashed using an algorithm

Question 13

Hashing the same data

Answer 13

two files containing the same data and if hashed with the same hashing algorithm, it will produce the same hash value.

Question 14

Verifying Integrity

Answer 14

In forensics the file is hashed at the start and then compared the hash when complete to ensure the hashes match.

Question 15

One-way function

Answer 15

Hashing is a one-way function and cannot be reversed

Question 16

Hash-Based Message Authentication Code

Answer 16

Involves a cryptographic hash function and a secret cryptographic key.

Question 17

Defense in Depth Model

Answer 17

Is the concept of protecting a company’s data with a series of defensive layers so that if one layer fails another layer will be already in place to thwart an attack.