SSCP · Question #54
Technical controls such as encryption and access control can be built into the operating system, be software applications, or can be supplemental hardware/software units. Such controls, also known…
The correct answer is B. Preventive/Technical Pairing. Security controls are classified along two axes: function (preventive, detective, corrective) and layer (administrative/physical/technical). Technical controls-also called logical controls-are implemented in hardware or software (e.g., encryption, access control lists…
Question
Options
- APreventive/Administrative Pairing
- BPreventive/Technical Pairing
- CPreventive/Physical Pairing
- DDetective/Technical Pairing
How the community answered
(35 responses)- A3% (1)
- B86% (30)
- C9% (3)
- D3% (1)
Explanation
Security controls are classified along two axes: function (preventive, detective, corrective) and layer (administrative/physical/technical). Technical controls-also called logical controls-are implemented in hardware or software (e.g., encryption, access control lists, firewalls, authentication systems). Their primary function is preventive: they are designed to stop unauthorized access or data exposure before it occurs. Therefore, encryption and access control represent a Preventive/Technical pairing. (A) Administrative controls involve policies and procedures, not software. (C) Physical controls involve locks, fences, and hardware barriers. (D) Detective/Technical controls detect incidents after they occur (e.g., IDS, audit logs), which does not describe encryption or access control whose purpose is prevention.
Topics
Community Discussion
No community discussion yet for this question.