Information Security Controls Quiz

Which of the following is considered a technical control in information security?

• Security policy enforcement

• Intrusion Detection System (IDS)

• User training program

• Security camera installation

An organization installs a badge reader and surveillance cameras at all facility entrances. What type of control is this?

• Operational

• Managerial

• Technical

• Physical

Which security control type includes activities such as incident response planning and access reviews?

• Physical

• Operational

• Managerial

• Preventive

Which of the following controls is designed to alert administrators to a security incident?

• Preventive

• Corrective

• Detective

• Compensating

What is the main purpose of a compensating control?

• To prevent unauthorized access

• To detect unusual activity

• To serve as an alternative when primary controls fail

• To guide user behavior through policies

Which component of the Zero Trust model evaluates access policies before granting access?

• Policy Enforcement Point

• Policy Administrator

• Policy Engine

• Security Token Service

What role does non-repudiation play in cybersecurity?

• Prevents data interception

• Ensures system redundancy

• Proves an action or communication occurred

• Encrypts user credentials

What is the purpose of an impact analysis in the change management process?

• To reduce implementation cost

• To assess how a change affects systems and security

• To train staff on security best practices

• To monitor compliance with data retention policies

Which security tool aggregates and analyzes logs to detect security threats?

• Patch Management

• Data Loss Prevention (DLP)

• Security Information and Event Management (SIEM)

• Access Control List (ACL)

Why is alert tuning important in security monitoring?

• To save bandwidth during log transmission

• To improve network throughput

• To reduce false positives and prioritize real threats

• To increase patching frequency