Discuss ISC2 ISSMP Exam Topic 5 Question 11

Which of the following are examples of administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information?

Each correct answer represents a complete solution. Choose three.

AEmployee registration and accounting

BDisaster preparedness and recovery plans

CNetwork authentication

DTraining and awareness

EEncryption

Suggested Answer: A, B, D

The following are examples of the administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information.

Training and awareness

Policy enforcement

Personnel registration and accounting

Disaster preparedness and recovery plans

Administrative controls can be security policies or items such as standards, guidelines, and procedures for individuals to follow to ensure security. Administrative controls are the foundations from which technical and physical controls are implemented.

Answer options C and E are incorrect. Network authentication and encryption are examples of technical controls.

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Golda 11 months ago

Wait, how does encryption fit into this? Seems off to me.

Vanda 12 months ago

I agree, C and D are must-haves for any organization!

Ozell 12 months ago

Not sure about B, isn’t that more about recovery than access?

Sharika 12 months ago

I think A is also important for managing resources.

Corrinne 1 year ago

Definitely C and D are key for access control.

Scarlet 1 year ago

I feel like disaster preparedness and recovery plans don't really fit the criteria for access control, but I could be wrong.

Juan 1 year ago

Training and awareness seems like it could be relevant, but I’m a bit confused about whether it directly determines access to resources.

Javier 1 year ago

I think employee registration and accounting might be one of the answers, but I'm not entirely sure if it fits the definition of administrative controls.

Elvis 1 year ago

I remember practicing with a similar question, and I think network authentication is definitely an administrative control.

Walker 1 year ago

Okay, let me see. The definition of done is meant to establish clear criteria for when a piece of work is truly finished, right? So I think options B and D are the most relevant - it helps the team have a shared understanding, and also informs sprint planning. I'll select those.

Rashida 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to review my notes on the Service Portfolio to make sure I understand the key data objects.

Alana 1 year ago

I'm a little confused by the friend function declaration. Does that mean the << operator is not a member function of the class? I'll have to double-check how that works.

ISC2 ISSMP Exam - Topic 5 Question 11 Discussion