(ISC)2 Certified in Cybersecurity Practice Exam

Which type of controls are primarily implemented by the hardware, software, or firmware components of an information system?

1. Administrative Controls

2. Technical Controls

3. Physical Controls

4. Operational Controls

The correct answer is: Technical Controls

Technical controls are mechanisms that are primarily implemented through hardware, software, or firmware components of an information system. These controls typically involve technology and are designed to protect the confidentiality, integrity, and availability of information. For example, antivirus software, firewalls, encryption protocols, and access control systems are all considered technical controls. They play a crucial role in defending against threats such as unauthorized access, malware, and data breaches by utilizing the capabilities of the system’s underlying technology. In contrast, administrative controls involve policies and procedures set by an organization to manage security and risk, focusing more on the organizational aspects rather than the technological components. Physical controls are related to the tangible measures that protect the physical environment, like security guards and locks, while operational controls address the processes and actions that ensure effective implementation of security measures. Understanding these distinctions clarifies the role of technical controls as essential elements in a comprehensive security posture, leveraging technology to safeguard information systems effectively.