CSSLP · Question #264
Security controls are safeguards or countermeasures to avoid, counteract, or minimize security risks. Which of the following are types of security controls? Each correct answer represents a complete…
The correct answer is A. Common controls B. Hybrid controls D. System-specific controls. The question asks to identify recognized types of security controls based on how they are implemented or managed across systems.
Question
Security controls are safeguards or countermeasures to avoid, counteract, or minimize security risks. Which of the following are types of security controls? Each correct answer represents a complete solution. Choose all that apply.
Options
- ACommon controls
- BHybrid controls
- CStorage controls
- DSystem-specific controls
How the community answered
(44 responses)- A86% (38)
- C14% (6)
Why each option
The question asks to identify recognized types of security controls based on how they are implemented or managed across systems.
Common controls are security controls that are inherited by multiple information systems or programs.
Hybrid controls are security controls for which some aspects are common and other aspects are system-specific.
"Storage controls" describe controls applied to data storage (e.g., encryption, access control on storage devices) but are a functional category, not a classification type like common, hybrid, or system-specific controls which describe how controls are applied or managed across systems.
System-specific controls are security controls implemented for a particular information system and are not inherited by other systems.
Concept tested: Types of security controls (NIST classification)
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.