{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

Which of the following is a physical security control?

A. Security guard

B. Incident response plan

C. Multi-factor authentication

D. Log monitoring

1

An employee receives training on how to handle phishing emails. This is an example of which categories/methods of control:

A. Operational, Corrective

B. Managerial, Directive

C. Physical, Compensating

D. Technical, Preventive

1

Which control method is designed to identify an attack in progress or after it has happened?

A. Detective

B. Preventive

C. Corrective

D. Deterrent

1

Which BEST describes the goal of a defense-in-depth strategy?

A. To replace employee training with technology

B. To avoid using physical security measures

C. To use multiple types of controls to address different threats

D. To create redundancy by adding identical controls

1

Which best describes a compensating control?

A. Used only for physical threats

B. Reduces the impact of an attack after it happens

C. Provides an alternative safeguard when the primary control isn’t available

D. Prevents attacks before they occur

1

Visible CCTV signs at a building entrance are an example of which control type?

A. Detective

B. Corrective

C. Directive

D. Deterrent

1

Security policies and annual audits fall under which security control category?

A. Technical

B. Operational

C. Managerial

D. Physical

1

Why is relying on only one security control risky?

A. It increases the cost of security

B. It may fail, leaving no backup defense

C. It ensures compliance with regulations

D. It slows response time

AP Cybersecurity: 1.3B - Formative Assessment Questions

AP Cybersecurity: 1.3B - Formative Assessment Questions

Which of the following is a physical security control?

An employee receives training on how to handle phishing emails. This is an example of which categories/methods of control:

Which control method is designed to identify an attack in progress or after it has happened?

Which BEST describes the goal of a defense-in-depth strategy?

Which best describes a compensating control?

Visible CCTV signs at a building entrance are an example of which control type?

Security policies and annual audits fall under which security control category?

Why is relying on only one security control risky?

Which of the following is a physical security control?

An employee receives training on how to handle phishing emails. This is an example of which categories/methods of control:

Which control method is designed to identify an attack in progress or after it has happened?

Which BEST describes the goal of a defense-in-depth strategy?

Which best describes a compensating control?

Visible CCTV signs at a building entrance are an example of which control type?

Security policies and annual audits fall under which security control category?

Why is relying on only one security control risky?