2. IT Security Controls Quiz

What are attackers looking for in IT security?

• Ways to create policies

• Ways to build firewalls

• Ways to protect data

• Ways to gain access to systems

Which of the following is NOT a category of security controls?

• Operational

• Managerial

• Financial

• Technical

What type of control is a firewall rule?

• Preventive

• Compensating

• Detective

• Corrective

Which category does a guard shack checking identification fall into?

• Physical

• Operational

• Managerial

• Technical

What is the primary purpose of a deterrent control?

• To discourage attacks

• To detect breaches

• To correct incidents

• To prevent access

Which category does a splash screen providing security information fit into?

• Operational

• Managerial

• Physical

• Technical

What is the role of a detective control?

• To compensate for vulnerabilities

• To detect and warn about breaches

• To prevent access

• To correct incidents

Which category does reviewing login reports fall into?

• Technical

• Physical

• Managerial

• Operational

What is a corrective control designed to do?

• Discourage attacks

• Correct incidents after detection

• Detect breaches

• Prevent access

Which category does recovering from a backup fall into?

• Technical

• Managerial

• Operational

• Physical