nerdexam
(ISC)2

CGRC · Question #265

Which of the following are included in Physical Controls? Each correct answer represents a complete solution. Choose all that apply. Response:

The correct answer is A. Locking systems and removing unnecessary floppy or CD-ROM drives B. Environmental controls E. Monitoring for intrusion F. Controlling individual access into the facility and different departments. Physical controls encompass measures that protect physical assets and facilities, including securing hardware, managing environmental factors, and regulating access to secure areas. These controls directly prevent unauthorized physical access or damage to information systems…

Selection and Approval of Framework, Security, and Privacy Controls

Question

Which of the following are included in Physical Controls? Each correct answer represents a complete solution. Choose all that apply. Response:

Options

  • ALocking systems and removing unnecessary floppy or CD-ROM drives
  • BEnvironmental controls
  • CPassword and resource management
  • DIdentification and authentication methods
  • EMonitoring for intrusion
  • FControlling individual access into the facility and different departments

How the community answered

(36 responses)
  • A
    94% (34)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Physical controls encompass measures that protect physical assets and facilities, including securing hardware, managing environmental factors, and regulating access to secure areas. These controls directly prevent unauthorized physical access or damage to information systems and their surroundings.

ALocking systems and removing unnecessary floppy or CD-ROM drivesCorrect

Locking systems and removing unnecessary floppy or CD-ROM drives are physical measures to prevent unauthorized access to or data exfiltration from computer systems.

BEnvironmental controlsCorrect

Environmental controls, such as temperature, humidity, and fire suppression systems, protect physical hardware from environmental damage, making them physical controls.

CPassword and resource management

Password and resource management are logical or technical controls, dealing with access to data and systems rather than physical assets.

DIdentification and authentication methods

Identification and authentication methods, while sometimes involving physical tokens, primarily refer to logical processes for verifying user identity for system access, not physical facility protection.

EMonitoring for intrusionCorrect

Monitoring for intrusion involves physical security measures like security guards, cameras, and alarm systems to detect unauthorized entry into facilities or restricted areas.

FControlling individual access into the facility and different departmentsCorrect

Controlling individual access into the facility and different departments, through methods like badge systems, turnstiles, and locked doors, is a primary function of physical access control.

Concept tested: Types of security controls - Physical

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

Topics

#Physical Controls#Security Controls#Access Control#Environmental Security

Community Discussion

No community discussion yet for this question.

Full CGRC Practice