Security Control Categories and Types Quiz

1. Which of the following is a physical security control?

Multi-factor authentication

Locked server room

Antivirus software

Role-based access control

Submit

3. Which control type is most effective at reducing risk from internal threats?

Detective controls

Preventive controls

Corrective controls

Compensating controls

4. A compensating control must provide equivalent or greater protection than the control it replaces. True or False?

True

False

5. Security awareness training is categorized as which type of control?

Technical

Administrative

Physical

Corrective

Submit

7. Which control category includes access control lists, encryption, and firewalls?

Administrative

Physical

Technical

Preventive

8. Technical controls rely primarily on human judgment and decision-making. True or False?

True

False

9. Which control type identifies and logs unauthorized access attempts?

Preventive

Detective

Corrective

Deterrent

Submit

11. Which control type is designed to stop a security incident before it occurs?

Detective

Preventive

Corrective

Compensating

Submit

13. Which control compensates for the absence or failure of a primary control?

Preventive control

Compensating control

Corrective control

Detective control

14. Encryption of sensitive data is classified as which control category?

Administrative

Physical

Technical

Operational

15. A deterrent control is meant to discourage potential attackers. True or False?

True

False

16. Which control type responds to and mitigates the effects of a detected security incident?

Preventive

Detective

Corrective

Deterrent

Submit

18. Administrative controls include policies, procedures, and training. True or False?

True

False

19. Which of the following is a detective control?

Access control list

Security awareness training

Intrusion detection system

Encryption

20. A firewall blocking unauthorized traffic is an example of which control category?

Administrative

Physical

Technical

Logical

Security+ Security Control Categories and Types Quiz

1. Which of the following is a physical security control?

2.

What first name or nickname would you like us to use?

2. A system that automatically isolates infected devices from the network is a ____ control.

3. Which control type is most effective at reducing risk from internal threats?

4. A compensating control must provide equivalent or greater protection than the control it replaces. True or False?

5. Security awareness training is categorized as which type of control?

6. A warning sign stating 'Authorized Personnel Only' is an example of a ____ control.

7. Which control category includes access control lists, encryption, and firewalls?

8. Technical controls rely primarily on human judgment and decision-making. True or False?

9. Which control type identifies and logs unauthorized access attempts?

10. An automated backup system that restores data after a ransomware attack is a ____ control.

11. Which control type is designed to stop a security incident before it occurs?

12. A security policy that requires password changes every 90 days is an example of a ____ control.

13. Which control compensates for the absence or failure of a primary control?

14. Encryption of sensitive data is classified as which control category?

15. A deterrent control is meant to discourage potential attackers. True or False?

16. Which control type responds to and mitigates the effects of a detected security incident?

17. A security guard at a facility entrance is an example of a ____ control.

18. Administrative controls include policies, procedures, and training. True or False?

19. Which of the following is a detective control?

20. A firewall blocking unauthorized traffic is an example of which control category?