Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSMP Exam - Topic 5 Question 76 Discussion

Posted by Ciara on Dec 10, 2023 at 05:54 AM

Which of the following are examples of administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information? Each correct answer represents a complete solution. Choose three.

Suggested Answer: D

A hot site is a duplicate of the original site of the organization, with full computer systems as well as near-complete backups of user data. It provides the backup facility, which is maintained in a constant order, with a full complement of servers, workstations, and communication links ready to assume the primary operations responsibility.

A hot site is a backup site in case disaster has taken place in a data center. A hot site is located off site and provides the best protection. It is an exact replica of the current data center. In case a disaster struck to the data center, administrators just need to take the backup of recent

data in hot site and the data center is back online in a very short time. It is very expensive to create and maintain the hot site. There are lots of third party companies that provide disaster recovery solutions by maintaining hot sites at their end.

Answer option B is incorrect. A cold site is a backup site in case disaster has taken place in a data center. This is the least expensive disaster recovery solution, usually having only a single room with no equipment. All equipment is brought to the site after the disaster. It can be on site or off site.

Answer option A is incorrect. Mobile sites are self-reliant, portable shells custom-fitted with definite telecommunications and IT equipment essential to meet system requirements. These are presented for lease through commercial vendors.

Answer option C is incorrect. A warm site is, quite logically, a compromise between hot and cold sites. Warm sites will have hardware and connectivity already established, though on a smaller scale than the original production site or even a hot site. These sites will have backups on hand, but they may not be complete and may be between several days and a week old. An example would be backup tapes sent to the warm site by courier.


Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
40 comments · newest first
DA
Dalene 10 months ago
I agree, D is essential for all employees to understand their roles!
DE
Destiny 11 months ago
Wait, are we sure about B? Seems off for access control.
BR
Brent 11 months ago
A doesn't really fit the bill, right?
SA
Sarina 11 months ago
I think D is also super important for access control.
RO
Rory 11 months ago
Definitely C, network authentication is key!
AR
Aretha 12 months ago
I feel like encryption is more of a technical control rather than an administrative one, so I’m leaning towards A, C, and D for the answers.
AN
Antonio 12 months ago
Network authentication seems like a clear example, but I’m a bit confused about whether disaster preparedness counts as an administrative control.
DO
Dortha 12 months ago
I remember discussing training and awareness as a key part of administrative controls in class. It definitely involves all employees.
YU
Yuonne 1 year ago
I think employee registration and accounting might be an administrative control, but I'm not entirely sure if it fits the criteria for access control.
AL
Alayna 1 year ago
This is a good question to test our knowledge of administrative controls. I'll go with the options that clearly involve all employees and access management, like network authentication and training.
SY
Sylvia 1 year ago
I'm a little confused by the wording of this question. I want to make sure I understand the difference between administrative controls and other types of controls before selecting my answers.
LE
Leanna 1 year ago
Okay, let's see. Employee registration and accounting, training and awareness - those seem like good options that involve all employees and control access. I'll mark those.
VO
Von 1 year ago
Hmm, I'm a bit unsure about this one. I'll need to carefully read through the options and think about which ones best fit the criteria.
TE
Tesha 1 year ago
This looks like a straightforward question on administrative controls. I'll focus on the key criteria of involving all levels of employees and determining access to resources and information.
RO
Rory 1 year ago
Okay, let's see. I think the key is to focus on the new subnet implementation and what needs to be done after that.
KE
Kenneth 1 year ago
Okay, I think I've got this. The Auto-Redaction feature is designed to accelerate the redaction process by automatically finding and redacting sensitive information. Choice C seems to capture that purpose the best.
MU
Murray 1 year ago
Ugh, I'm struggling with this one. I know the marketing mix is important, but I'm having trouble remembering the specific elements of the product component. I'll just have to make an educated guess and hope for the best.
MO
Mona 1 year ago
I remember studying the Rules Centralization pattern; it sounds like a good way to make things more efficient by centralizing the routing logic.
RO
Rolande 1 year ago
This question seems straightforward, I'll carefully review the characteristics and match them to the options.
KI
King 1 year ago
Network authentication, training, and encryption? Yep, that's the way to go! Though I have to admit, the accountants might be a little miffed about all the extra security measures cutting into their lunch break.
AD
Adelle 1 year ago
↳ replying to King
Accountants may need to adjust to new security measures.
GE
Germaine 1 year ago
↳ replying to King
Encryption helps protect sensitive information.
DA
Darell 1 year ago
↳ replying to King
Training and awareness are important for all employees.
MA
Marvel 1 year ago
↳ replying to King
Network authentication is crucial for security.
IS
Isaiah 1 year ago
Aha, I've got it! C, D, and E are the way to go. Gotta love those network authentication, training, and encryption measures. Though I have to say, the disaster recovery plans might come in handy if the IT folks accidentally delete the entire database. Oops!
XU
Xuan 1 year ago
Okay, let's see here... C, D, and E, no doubt. Gotta keep those hackers at bay with some good old-fashioned authentication, training, and encryption. Though I do wonder if the accountants are having a field day with all this security stuff.
RH
Rhea 1 year ago
↳ replying to Xuan
User 3: Absolutely, it's important to have a strong security framework in place. Employee registration and accounting may not be as exciting, but it's crucial for overall security.
ST
Stefany 1 year ago
↳ replying to Xuan
User 2: I agree, those are essential for keeping our data secure. And I'm sure the accountants are busy keeping track of all the expenses for these security measures.
LE
Leanora 1 year ago
↳ replying to Xuan
User 1: C, D, and E are definitely the way to go. Can't go wrong with network authentication, training, and encryption.
JA
Janae 1 year ago
Hmm, let me think... I'd say C, D, and E for sure. Keeping those networks secure and users informed is key. Though I have to admit, the disaster recovery plans are pretty important too.
ST
Stevie 1 year ago
↳ replying to Janae
User 3: Encryption is essential to protect sensitive information from unauthorized access.
TA
Tayna 1 year ago
↳ replying to Janae
User 2: Employee training and awareness is also important to prevent security breaches.
AN
Andra 1 year ago
↳ replying to Janae
User 1: I agree, network authentication is crucial for security.
ED
Edwin 1 year ago
Ah, this one's a tricky one! I'm pretty sure the answer involves C, D, and E. Gotta love those authentication, training, and encryption measures, am I right?
MA
Margart 1 year ago
↳ replying to Edwin
It's crucial to have a combination of controls in place to protect sensitive data and prevent unauthorized access.
ER
Erasmo 1 year ago
↳ replying to Edwin
Absolutely, those measures help ensure that only authorized users have access to resources and information.
HE
Helga 1 year ago
↳ replying to Edwin
I think you're right! Network authentication, training, and encryption are all important administrative controls.
EL
Elsa 2 years ago
I would also add B to the list. Disaster preparedness and recovery plans are crucial for ensuring business continuity in case of emergencies.
VE
Verona 2 years ago
I agree with Valentin. Network authentication, training and awareness, and employee registration and accounting are all important for controlling access to resources.
VA
Valentin 2 years ago
I think C, D, and A are the examples of administrative controls.
0/2000 characters

Save Cancel