CGRC · Question #161
Which of the following are included in Technical Controls? correct answer represents a complete solution. Choose all that apply. Response:
The correct answer is A. Implementing and maintaining access control mechanisms B. Password and resource management C. Configuration of the infrastructure D. Identification and authentication methods F. Security devices. Technical controls are security safeguards implemented through hardware or software, such as access control, authentication, infrastructure configuration, and security devices. These controls directly enforce security policies within information systems.
Question
Which of the following are included in Technical Controls? correct answer represents a complete solution. Choose all that apply. Response:
Options
- AImplementing and maintaining access control mechanisms
- BPassword and resource management
- CConfiguration of the infrastructure
- DIdentification and authentication methods
- EConducting security-awareness training
- FSecurity devices
How the community answered
(62 responses)- A90% (56)
- E10% (6)
Why each option
Technical controls are security safeguards implemented through hardware or software, such as access control, authentication, infrastructure configuration, and security devices. These controls directly enforce security policies within information systems.
Implementing and maintaining access control mechanisms is a technical control because it involves configuring systems and software to restrict access based on defined rules.
Password and resource management are technical controls as they involve system-level enforcement of password policies and management of resource access permissions.
Configuration of the infrastructure is a technical control because it refers to the secure setup and hardening of network devices, servers, and applications.
Identification and authentication methods are technical controls that use software and hardware to verify user identities before granting access.
Conducting security-awareness training is an operational or administrative control, not a technical control, as it focuses on educating users rather than implementing technology.
Security devices such as firewalls, intrusion detection systems, and antivirus software are prime examples of technical controls.
Concept tested: Types of security controls (technical)
Source: https://csrc.nist.gov/glossary/term/technical_controls
Topics
Community Discussion
No community discussion yet for this question.