Access Control

Question 1

Access Control categories

Answer 1

Administrative (Directive)
Technical
Physical

Question 2

Administrative control

Answer 2

Organizational policies and procedures (Based on organizational policies)
Regulation
Training and awareness
Includes how to hire and fire people

Question 3

Technical Controls

Answer 3

Logical controls
Hardware/software/firmware - firewall, router, encryption

Question 4

Physical Controls

Answer 4

Locks, fences, guards, dogs, gates, bollards, fence, posts with guards, doors with card swipe

Question 5

Access Control Types

Answer 5

Preventative
Detective
Corrective
Recovery
Deterrent
Compensating
many can be multiple types

Question 6

Preventative

Answer 6

Prevent action from happening
Examples least privileged, drug test, IPS, firewall, encryption

Question 7

Detective

Answer 7

Control that detect during or after an attack
Examples IDS, CCTV, alarms, antivirus

Question 8

Corrective

Answer 8

Control that correct an attack
Examples antivirus, patches, IPS

Question 9

Recovery

Answer 9

Control that helps us recover after an attack
Disaster recovery environment, backups, high availability environments

Question 10

Deterrent

Answer 10

Controls that deter an attack
Examples fences, security guards, dogs, lights, beware of dogs sign

Question 11

Compensating

Answer 11

Controls that compensate other controls that are impossible or too costly to implement