CGRC · Question #265
Which of the following are included in Physical Controls? Each correct answer represents a complete solution. Choose all that apply. Response:
The correct answer is A. Locking systems and removing unnecessary floppy or CD-ROM drives B. Environmental controls E. Monitoring for intrusion F. Controlling individual access into the facility and different departments. Physical controls encompass measures that protect physical assets and facilities, including securing hardware, managing environmental factors, and regulating access to secure areas. These controls directly prevent unauthorized physical access or damage to information systems…
Question
Which of the following are included in Physical Controls? Each correct answer represents a complete solution. Choose all that apply. Response:
Options
- ALocking systems and removing unnecessary floppy or CD-ROM drives
- BEnvironmental controls
- CPassword and resource management
- DIdentification and authentication methods
- EMonitoring for intrusion
- FControlling individual access into the facility and different departments
How the community answered
(36 responses)- A94% (34)
- C3% (1)
- D3% (1)
Why each option
Physical controls encompass measures that protect physical assets and facilities, including securing hardware, managing environmental factors, and regulating access to secure areas. These controls directly prevent unauthorized physical access or damage to information systems and their surroundings.
Locking systems and removing unnecessary floppy or CD-ROM drives are physical measures to prevent unauthorized access to or data exfiltration from computer systems.
Environmental controls, such as temperature, humidity, and fire suppression systems, protect physical hardware from environmental damage, making them physical controls.
Password and resource management are logical or technical controls, dealing with access to data and systems rather than physical assets.
Identification and authentication methods, while sometimes involving physical tokens, primarily refer to logical processes for verifying user identity for system access, not physical facility protection.
Monitoring for intrusion involves physical security measures like security guards, cameras, and alarm systems to detect unauthorized entry into facilities or restricted areas.
Controlling individual access into the facility and different departments, through methods like badge systems, turnstiles, and locked doors, is a primary function of physical access control.
Concept tested: Types of security controls - Physical
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.