Logical or technical controls involve the restriction of access to systems and the protection of information. Which of the following statements pertaining to these types of controls is correct?

Question

Options

• AExamples of these types of controls include policies and procedures, security awareness
• BExamples of these types of controls do not include encryption, smart cards, access lists,
• CExamples of these types of controls are encryption, smart cards, access lists, and
• DExamples of these types of controls include policies and procedures, security awareness

• A
  3% (1)
• B
  6% (2)
• C
  87% (27)
• D
  3% (1)

Explanation

Logical (or technical) controls are hardware- and software-based mechanisms that restrict access to systems and protect information. Classic examples include encryption, smart cards, access control lists (ACLs), audit logs, intrusion detection systems, and biometrics. Answers A and D describe administrative controls (policies, procedures, security awareness training), which are a separate category. Answer B is a negative statement that incorrectly excludes encryption and smart cards. Answer C correctly identifies the defining examples of logical/technical controls.

No community discussion yet for this question.