nerdexam
(ISC)2

CSSLP · Question #264

Security controls are safeguards or countermeasures to avoid, counteract, or minimize security risks. Which of the following are types of security controls? Each correct answer represents a complete…

The correct answer is A. Common controls B. Hybrid controls D. System-specific controls. The question asks to identify recognized types of security controls based on how they are implemented or managed across systems.

Secure Software Concepts

Question

Security controls are safeguards or countermeasures to avoid, counteract, or minimize security risks. Which of the following are types of security controls? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ACommon controls
  • BHybrid controls
  • CStorage controls
  • DSystem-specific controls

How the community answered

(44 responses)
  • A
    86% (38)
  • C
    14% (6)

Why each option

The question asks to identify recognized types of security controls based on how they are implemented or managed across systems.

ACommon controlsCorrect

Common controls are security controls that are inherited by multiple information systems or programs.

BHybrid controlsCorrect

Hybrid controls are security controls for which some aspects are common and other aspects are system-specific.

CStorage controls

"Storage controls" describe controls applied to data storage (e.g., encryption, access control on storage devices) but are a functional category, not a classification type like common, hybrid, or system-specific controls which describe how controls are applied or managed across systems.

DSystem-specific controlsCorrect

System-specific controls are security controls implemented for a particular information system and are not inherited by other systems.

Concept tested: Types of security controls (NIST classification)

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

Topics

#Security Controls#Control Classification#Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice