(ISC)2 Certified in Cybersecurity Practice Exam

Which control type would focus on the tools and technologies to secure a system?

1. Physical Controls

2. Administrative Controls

3. Technical Controls

4. Compliance Controls

The correct answer is: Technical Controls

Technical controls are designed specifically to implement and enforce security measures using various tools and technologies. These controls include software-based solutions such as firewalls, intrusion detection systems, encryption, and authentication mechanisms. The primary focus of technical controls is to safeguard systems by ensuring that proper security protocols are in place and actively functioning. For instance, technical controls can automatically manage access to a system, monitor for unauthorized attempts to breach security, and protect data through encryption methods. Their effectiveness relies on the deployment of technology to mitigate vulnerabilities, manage risks, and enhance the overall security posture of an organization. While physical controls pertain to tangible barriers and security measures (like locks, security guards, and surveillance cameras), and administrative controls refer to policies, procedures, and practices established to manage organizational security, these do not focus directly on the technologies used for securing systems. Compliance controls involve adherence to laws and standards, which are also not technology-focused. Thus, the emphasis of technical controls distinctly sets them apart as the correct option for this question.