ISFS · Question #55
The Information Security Manager (ISM) at Smith Consultants Inc. introduces the following measures to assure information security: - The security requirements for the network are specified. - A test…
The correct answer is D. Introducing RFID access passes. Introducing RFID access passes for the building (D) is a physical security measure, not a technical one. Physical measures control access to tangible spaces and hardware, while technical measures operate within IT systems and infrastructure. The distractors are wrong for these…
Question
The Information Security Manager (ISM) at Smith Consultants Inc. introduces the following measures to assure information security:
- The security requirements for the network are specified.
- A test environment is set up for the purpose of testing reports
coming from the database.
- The various employee functions are assigned corresponding access
rights.
- RFID access passes are introduced for the building.
Which one of these measures is not a technical measure?
Options
- AThe specification of requirements for the network
- BSetting up a test environment
- CIntroducing a logical access policy
- DIntroducing RFID access passes
How the community answered
(30 responses)- A7% (2)
- B3% (1)
- C13% (4)
- D77% (23)
Explanation
Introducing RFID access passes for the building (D) is a physical security measure, not a technical one. Physical measures control access to tangible spaces and hardware, while technical measures operate within IT systems and infrastructure.
The distractors are wrong for these reasons:
- A (network requirements specification) is technical - it defines IT security controls for network infrastructure.
- B (test environment) is technical - it involves IT systems and software testing processes.
- C (logical access policy) is technical - assigning role-based access rights is a classic IT/logical control enforced by software systems.
Memory tip: Ask yourself, "Does this protect a door or a data system?" RFID badges open physical doors - that's physical security. Firewalls, access rights, and test environments all live inside IT systems - those are technical. When you see "building access" or "locks/badges/cameras," think physical, not technical.
Topics
Community Discussion
No community discussion yet for this question.