CSSLP · Question #34
Which of the following are the types of access controls? Each correct answer represents a complete solution. Choose three.
The correct answer is A. Physical B. Technical C. Administrative. This question asks to identify the three primary categories of access controls used in information security.
Question
Which of the following are the types of access controls? Each correct answer represents a complete solution. Choose three.
Options
- APhysical
- BTechnical
- CAdministrative
- DAutomatic
How the community answered
(36 responses)- A86% (31)
- D14% (5)
Why each option
This question asks to identify the three primary categories of access controls used in information security.
Physical access controls regulate entry to physical facilities and assets, employing measures such as guards, locks, fences, and biometric systems to prevent unauthorized individuals from gaining access.
Technical access controls, also known as logical controls, are implemented through software and hardware mechanisms within information systems to restrict access to systems, applications, or data. Examples include authentication, authorization, encryption, and firewalls.
Administrative access controls are organizational policies, procedures, and guidelines that dictate how security is managed, including user training, security awareness programs, security plans, and personnel controls like background checks.
'Automatic' is not a standard, recognized primary category of access control; rather, access controls can be automated as an implementation detail within the physical, technical, or administrative types.
Concept tested: Types of access controls
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v1r1.pdf
Topics
Community Discussion
No community discussion yet for this question.