Cybersecurity Controls Quiz

Which of the following is NOT one of the three main categories of controls within cybersecurity?

• Administrative/Managerial controls

• Technical controls

• Financial controls

• Physical controls

Which control type is designed to prevent an incident from occurring?

• Corrective

• Detective

• Preventative

• Deterrent

Badge readers are an example of which control category?

• Technical controls

• Administrative controls

• Physical controls

• Preventative controls

How do administrative controls help protect an organization?

• By encrypting data

• By defining policies and procedures

• By installing surveillance cameras

• By using antivirus software

Which type of control is used to restore an asset after an incident?

• Preventative

• Detective

• Corrective

• Deterrent

What is the main purpose of deterrent controls?

• To restore assets

• To discourage attacks

• To detect incidents

• To prevent access

Password policies are designed to reduce the likelihood of account compromise through which methods?

• Social engineering

• Brute force or dictionary attack techniques

• Phishing

• Physical theft

Which administrative control helps bolster confidentiality and integrity by defining which groups can access or modify data?

• Account management policies

• Access control policies

• Separation of duties

• Disaster recovery plans

Which control is specifically aimed at limiting the overall impact from disgruntled former employees and default account usage?

• Access control policies

• Account management policies

• Disaster recovery plans

• Separation of duties

Which control type is encryption classified as?

• Preventative

• Corrective

• Deterrent

• Detective