Which of the following is NOT a technical control?

Question

Options

• APassword and resource management
• BIdentification and authentication methods
• CMonitoring for physical intrusion
• DIntrusion Detection Systems

• A
  8% (4)
• B
  2% (1)
• C
  87% (45)
• D
  4% (2)

Explanation

It is considered to be a 'Physical Control' There are three broad categories of access control: administrative, technical, and physical. Each category has different access control mechanisms that can be carried out manually or automatically. All of these access control mechanisms should work in concert with each other to protect an infrastructure and its data. Each category of access control has several components that fall within it, a partial list is shown here. Not all controls fall into a single category, many of the controls will be in two or more categories. Below you have an example with backups where it is in all three categories: Administrative Controls Policy and procedures - A backup policy would be in place Personnel controls Supervisory structure Security-awareness training Physical Controls Network segregation Perimeter security Computer controls Work area separation Data backups (actual storage of the media, i:e Offsite Storage Facility) Technical Controls Network architecture Encryption and protocols Backup (Actual software doing the backups) The following answers are incorrect : Password and resource management is considered to be a logical or technical control. Identification and authentication methods is considered to be a logical or technical control. Intrusion Detection Systems is considered to be a logical or technical control.

No community discussion yet for this question.