3.3 Cyber security controls (access controls)

What do physical controls in cybersecurity aim to restrict?

• Data encryption methods

• Software installation processes

• User account management

• Physical access to facilities and resources

Which of the following is an example of a hardware control?

• Firewalls

• Cable locks

• Access management procedures

• Blockchain technology

What is the primary purpose of software controls?

• To encrypt data in transit

• To manage user roles and permissions

• To protect systems from cyber threats

• To secure physical devices from theft

How do data controls protect sensitive information?

• By using cable locks on hardware

• By restricting physical access to data storage areas

• By encrypting data stored on external drives

• By implementing access controls and encryption

What is the role of encryption controls in cybersecurity?

• To detect and prevent malware infections

• To define user roles and permissions

• To secure data and communications through cryptographic algorithms

• To physically secure hardware components

Which of the following is a characteristic of cryptography devices?

• They include policies and procedures for data backup

• They are software solutions like firewalls

• They provide secure storage and data protection

• They involve physical measures like safes and locks

What do procedural controls in cybersecurity involve?

• Policies, procedures, and guidelines

• Hardware-based encryption solutions

• Encryption algorithms

• Physical access restrictions

Which emerging technology is mentioned as being used for securing transactions?

• Blockchain

• Anti-malware software

• Cable locks

• Biometric access systems

What is the benefit of using blockchain technology in cybersecurity?

• It allows for the physical securing of devices

• It restricts access to authorized personnel only

• It enhances the encryption of data at rest

• It ensures the integrity and transparency of transactions

What is a layered approach in cybersecurity aimed at?

• Combining various controls to strengthen security posture

• Protecting against physical theft of devices

• Implementing only software and hardware controls

• Focusing solely on physical security measures