Security Control Knowledge Checkpoint

What are the three control types?​ ​ (a)   ​ (b)   ​ (c)  

• Preventative
• Corrective
• Detective
• Deterrent
• Physical
• Psychological
• Technical
• Support
• Administrative
• Informational

As part of her monthly routine, Selena is conducting a company-wide audit of all access logs. What control type and control function does an audit fall under?

• Administrative and Preventative

• Physical and Detective

• Administrative and Detective

• Technical and Preventative

Match the following control types to the correct control functions.

• Technical and Preventative

• CCTV

• Administrative and Detective

• Lock

• Technical and Corrective

• AntiVirus

• Physical and Detective

• Rebooting a system

• Physical and Preventative

• Audit Logs

Sam has been hired by a small coffee shop to conduct a vulnerability assessment of their network. Sam noticed that when the shop hires on new employees, there is no program to provide an orientation where someone reviews the companies policies and safety protocols. He determines that the coffee shop should have a protocol for hiring and terminating employees where they are briefed on these protocols. What control type does this fall under what is the controls function?

• Administrative and Corrective

• Technical and Corrective

• Technical and Preventative

• Administrative and Preventative

Match the following

• Physical and Corrective

• IDS

• Technical and Detective

• Re-issue Access Card

• Physical and Detective

• Separation of Duties

• Administrative and Corrective

• Business Continuity Plan

• Administrative and Preventative

• Alarm System

John has been hired by Wal Mart to assess the overall security of their network. During his overview he finds that they do not have a firewall protecting their main database server. He advises that they could add a next generation firewall to greatly increase their overall security. What is the control type and control function of a firewall?

• Physical and Detective

• Technical and Preventative

• Administrative and Detective

• Technical and Detective

Sean is assessing the network security for Blockbuster videos. During his assessment, he determined that one of the wireless access points was configured as an open network. Sean annotated this in his notes, and provided a recommendation to reconfigure the access point with a security mode that would encrypt the traffic coming in and going out. What control type and function would encryption fall under?

• Administrative and Preventative

• Physical and Preventative

• Technical and Preventative

• Technical and Corrective

Diana, the supervisor of a local government building has request that you provide a security solution to help prevent tailgating at the entrance to the building she manages. She has an Access Card system, but it hasn't been successful in preventing people from getting into the building on other peoples access card. She wants another physical control that will prevent this from happening. What can you recommend?

• Installing a man trap at the entrance of the building.

• Installing a CCTV system at the front door.

• Instituting a policy where all entries and accesses are placed into an audit log for review.

• Implementing Multi-factor authentication for all user accounts.

Alexis is a technician for CyberDyne Corp. and has been tasked with going through all of the server hardware and checking their security configurations. The configurations must match the ruleset that management provided to her. What control type and function is completed by conducting a security configuration analysis?

• Technical and Detective

• Administrative and Preventative

• Administrative and Detective

• Technical and Preventative