SY0-301 · Question #91
Which of the following is a management control?
The correct answer is B. Written security policy. Management controls are administrative in nature, such as policies and procedures, not technical mechanisms. A written security policy is the defining example of a management (administrative) control.
Question
Which of the following is a management control?
Options
- ALogon banners
- BWritten security policy
- CSYN attack prevention
- DAccess Control List (ACL)
How the community answered
(27 responses)- B93% (25)
- C4% (1)
- D4% (1)
Why each option
Management controls are administrative in nature, such as policies and procedures, not technical mechanisms. A written security policy is the defining example of a management (administrative) control.
Logon banners are a technical control because they are enforced by the operating system or application at the point of access.
A written security policy is a management control because it is an administrative directive that governs organizational behavior and security expectations. Management controls operate at the policy and procedural level rather than through technical enforcement. They set the framework within which technical and operational controls are implemented.
SYN attack prevention is a technical control implemented at the network or OS level to mitigate a specific protocol-based threat.
An Access Control List is a technical control that enforces permissions on resources through automated rule evaluation.
Concept tested: Security control categories - management vs technical
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.