Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 2 Question 37 Discussion

Posted by Elke on May 05, 2022 at 08:50 PM

An access control secures the confidentiality, integrity, and availability of the information and data of an organization. In which of the following categories can you deploy the access control? Each correct answer represents a part of the solution. Choose all that apply.

Suggested Answer: A, B, D

Preventive access control: It prevents unwanted or unauthorized activities from happening.

Detective access control: It searches for unwanted or unauthorized activities.

Corrective access control: It helps the systems in getting their normal status after an unwanted or unauthorized activity has occurred.

Answer option C is incorrect. It is a category of implementation of the access control. The administrative access control is a set of policies and

procedures that are defined by an organization's security policy in order to implement an access control.


Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
JE
Jerry 11 months ago
Not sure about that, I thought detective was more about monitoring.
CO
Corinne 12 months ago
I think preventive is the most crucial one here.
OW
Owen 12 months ago
Wait, can corrective access control really be a thing?
HA
Harrison 12 months ago
Totally agree, administrative is also super important!
CU
Curtis 1 year ago
Detective and preventive are key for access control.
AN
Angelyn 1 year ago
I’m torn about corrective access control. It seems more about responding to incidents rather than preventing them, but maybe it still applies?
JU
Julieta 1 year ago
I practiced a similar question last week, and I think preventive access control is crucial for protecting data. I’m pretty confident about that one.
MA
Maryln 1 year ago
I'm a bit unsure about detective access control. I feel like it might not directly secure confidentiality or integrity, but I could be wrong.
BE
Benedict 1 year ago
I think I remember that administrative access control is definitely one of the categories we can use. It seems to fit the definition well.
LY
Lynette 1 year ago
Okay, let's see. I know ifconfig can activate/deactivate interfaces and modify the routing table, so B and C are good. And it can definitely change IP addresses, so D is correct. I'm not sure about A and E, though. Guess I'll have to eliminate the ones I'm unsure of.
GI
Gianna 1 year ago
Hmm, I'm not too familiar with the Meraki MV Dashboard, so I'll have to think this through. Maybe I can eliminate some of the options that don't sound quite right.
TR
Tracie 1 year ago
I'm pretty confident that the correct answer is A. The BYOD environment shifts more responsibility to users, so the organization needs to ensure they comply with policies and procedures.
FI
Fidelia 1 year ago
Didn't we practice a question about control charts where p and n were more relevant? I think they relate to the proportions of defects.
0/2000 characters

Save Cancel