[Cisspstudy] access controls

[Steven Atcheson]

Whenever they refer to access controls and enforcing them, it will be  
preventative and technical. Administrative refers to awareness  
training - soft stuff which would be categorised as preventative but  
not in this question. Refer to p125 CISSP CBK - "technical controls  
are those mechanisms employed within the digital infrastructure that  
enforces policy". eg user controls, network access, remote access and  
system access.


On 30/10/2009, at 12:19 AM, Gaurav C wrote:

> I came across a questions ie.
> Question: 503
> Which of the following pairings uses technology to enforce access  
> control policies?
>
>     *  Preventive/Administrative
>     * ›Preventive/Technical
>     *  Preventive/Physical
>     *  Detective/Administrative
>
> I have marked answer Preventive/Administrative considering that  
> since polices are dealt in Administrative part so Preventive/ 
> Administrative is the right answer
>
> But answer that is give is Preventive/Technical can anyone explain  
> more about it
>
>
>
>
>
> _______________________________________________
> cisspstudy mailing list
> cisspstudy at cccure.org
> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091030/31d6a724/attachment.html>