General Security
Which category of security control is a firewall?+
- • Managerial
- • Operational
- ✓ Technical
- • Physical
A firewall enforces policy through technology, which makes it a technical (logical) control. Managerial controls are policies and risk decisions, operational controls are carried out by people, and physical controls include locks and fences.
A security guard checking badges at a lobby desk is which category of control?+
- • Technical
- • Managerial
- • Compensating
- ✓ Operational
Operational controls are implemented and executed by people, such as guards and awareness training. Managerial controls are about oversight, such as risk assessments and policy.
A documented risk assessment is an example of which control category?+
- ✓ Managerial
- • Operational
- • Technical
- • Physical
Managerial (administrative) controls focus on managing risk: policies, risk assessments and planning. They direct how other controls are chosen.
A "No Trespassing — Violators Will Be Prosecuted" sign is which type of control?+
- • Preventive
- ✓ Deterrent
- • Detective
- • Corrective
A deterrent control discourages an attacker from trying but does not physically stop them. A locked gate would be preventive.
A motion-activated camera that records intruders is which type of control?+
- • Preventive
- • Deterrent
- ✓ Detective
- • Directive
Detective controls identify and record events during or after they occur. Visible cameras can also deter, but recording activity is detection.
Restoring a server from backup after ransomware is which type of control?+
- • Detective
- • Deterrent
- • Preventive
- ✓ Corrective
Corrective controls reduce the impact of an incident and return systems to normal, for example restoring data from backups or patching after an exploit.
