nerdexam
EC-Council

312-50V11 · Question #274

The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

The correct answer is B. Procedural. A policy that prohibits employees from bringing personal devices into a facility is a procedural control because it governs human behavior through rules rather than physical barriers or technical mechanisms.

Information Security and Ethical Hacking Fundamentals

Question

The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

Options

  • APhysical
  • BProcedural
  • CTechnical
  • DCompliance

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    85% (29)
  • C
    9% (3)
  • D
    3% (1)

Why each option

A policy that prohibits employees from bringing personal devices into a facility is a procedural control because it governs human behavior through rules rather than physical barriers or technical mechanisms.

APhysical

Physical controls are tangible countermeasures such as locks, mantraps, badge readers, and security guards that restrict physical access - not written rules about employee behavior.

BProceduralCorrect

Procedural controls are administrative policies, rules, and guidelines that dictate how people must behave within an organization. A prohibition enforced through policy documents, employee agreements, and conduct rules - rather than locks, cameras, or software - is by definition procedural.

CTechnical

Technical controls use technology such as firewalls, encryption, or MDM software to enforce security - a policy prohibition does not involve any technology mechanism.

DCompliance

Compliance refers to adherence to laws, regulations, or standards and is not itself a category of security control in this classification scheme.

Concept tested: Classification of procedural vs physical vs technical security controls

Source: https://csrc.nist.gov/glossary/term/administrative_control

Topics

#security controls#procedural control#BYOD policy#physical security

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice