Which is a technical or administrative control for securing computer systems and communication networks?

Prepare for the Coach CFE Exam. Study using flashcards and multiple-choice questions, each with hints and explanations. Get ready for your assessment!

Multiple Choice

Which is a technical or administrative control for securing computer systems and communication networks?

Explanation:
Controlling access to resources through identity-based restrictions is fundamental to securing systems and networks. Implementing logical access controls means putting in place mechanisms and policies that verify who you are (authentication), determine what you’re allowed to do (authorization), and record what happens (accounting). These controls span both policy and technology: administrative processes like user provisioning and regular access reviews, and technical measures such as access control lists, roles, MFA, and audit logging. Together they reduce risk by preventing unauthorized users from reaching systems and data and by making misuse detectable. Privilege escalation describes an attacker’s attempt to gain higher privileges, not a protective measure. A network security system that detects or blocks threats serves a useful role, but it doesn’t by itself enforce access to individual resources in the broad, ongoing way that logical access controls do.

Controlling access to resources through identity-based restrictions is fundamental to securing systems and networks. Implementing logical access controls means putting in place mechanisms and policies that verify who you are (authentication), determine what you’re allowed to do (authorization), and record what happens (accounting). These controls span both policy and technology: administrative processes like user provisioning and regular access reviews, and technical measures such as access control lists, roles, MFA, and audit logging. Together they reduce risk by preventing unauthorized users from reaching systems and data and by making misuse detectable.

Privilege escalation describes an attacker’s attempt to gain higher privileges, not a protective measure. A network security system that detects or blocks threats serves a useful role, but it doesn’t by itself enforce access to individual resources in the broad, ongoing way that logical access controls do.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy