ISC2 - Chapter 1 - Module 3 - G2

A chief information security officer (CISO) at a large organization documented a policy that establishes the acceptable use of cloud environments for all staff. This is an example of a?

• Management/Administrative control

• Technical control

• Physical control

• Cloud control

Jengi is setting up security for a home network. Jengi decides to configure MAC address filtering on the router, so that only specific devices will be allowed to join the network. This is an example of a(n)_______ control?

• Physical

• Administrative

• Substantial

• Technical

Steve is a security practitioner assigned to come up with a protective measure for ensuring cars don't collide with pedestrians. What is probably the most effective type of control for this task?

• Administrative

• Technical

• Physical

• Nuanced

Triffid Corporation has a policy that all employees must receive security awareness instruction before using email; the company wants to make employees aware of potential phishing attempts that the employees might receive via email. What kind of control is this instruction?

• Administrative

• Finite

• Physical

• Technical

Which of the following statements is true?

• Logical access controls can protect the IT environment perfectly; there is no reason to deploy any other controls

• Physical access controls can protect the IT environment perfectly; there is no reason to deploy any other controls

• Administrative access controls can protect the IT environment perfectly; there is no reason to deploy any other controls

• It is best to use a blend of controls in order to provide optimum

Which of these is an example of a physical access control mechanism?

• Software-based firewall at the perimeter of the network

• A lock on a door

• Network switches that filter according to MAC addresses

• A process that requires two people to act at the same time to perform a function

Which type of fire-suppression system is typically the least expensive?

• Water

• Dirt

• Oxigen-depletion

• Gaseous

A biometric reader that grants access to a computer system in a data center is a:?

• Technical Control

• Physical Control

• Authorization Control

• Administrative Control

Which of the following is NOT an example of a physical security control?

• Firewalls

• Biometric access controls

• Security cameras

• Remote control electronic locks

Which of the following is an example of an administrative security control?

• Acceptable Use Policies

• Badge Readers

• No entry signs

• Access Control Lists