nerdexam
(ISC)2

CGRC · Question #465

To help review or design security controls, they can be classified by several criteri

The correct answer is C. Physical control. Security controls can be classified by their nature into categories such as technical, physical, and procedural controls.

Selection and Approval of Framework, Security, and Privacy Controls

Question

To help review or design security controls, they can be classified by several criteri

Options

  • AOne of these criteria is based on nature. According to this criteria, which of the following controls
  • BTechnical control
  • CPhysical control
  • DProcedural control
  • ECompliance control

How the community answered

(50 responses)
  • C
    94% (47)
  • D
    2% (1)
  • E
    4% (2)

Why each option

Security controls can be classified by their nature into categories such as technical, physical, and procedural controls.

AOne of these criteria is based on nature. According to this criteria, which of the following controls

This option describes a classification criterion (criteria based on nature) rather than being a specific type of security control itself.

BTechnical control

Technical controls are software or hardware-based protections, which are a valid classification by nature, but are not the specific answer chosen.

CPhysical controlCorrect

Physical controls protect tangible assets and environments, such as locks, fences, and security guards, making them a distinct category of security control based on their operational nature.

DProcedural control

Procedural controls are administrative policies and guidelines, also a valid classification by nature, but are not the specific answer chosen.

ECompliance control

Compliance control refers to the objective of meeting regulations, not the inherent nature or type of a security control.

Concept tested: Security control classification by nature

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

Topics

#Security control types#Physical security controls#Control classification#Asset protection

Community Discussion

No community discussion yet for this question.

Full CGRC Practice