ITPEC IP April 2020 Question 42
When information security measures are classified into three (3) measures, namely, technology measures, personnel measures, and physical measures, which of the following is the appropriate example of physical measures?
Explanation
A locked security zone with managed keys — physical measures protect places and equipment by controlling who can physically get in.
Security measures are often grouped by what they act on:
- •Technical measures — functions of the IT systems: authentication, access control, encryption, firewalls, anti-virus software
- •Personnel measures — rules for people and organization: training, confidentiality agreements, segregation of duties, mutual checks
- •Physical measures — the premises and objects: locked rooms and security zones, key and entry management, surveillance cameras, cable locks
Answer (d)
Why not others:
- •(a) — biometric authentication at login uses a body feature, but it is a function of the computer's login system, so it is a technical measure
- •(b) — a firewall filters traffic between networks, a technical measure
- •(c) — assigning several administrators to check each other's work is a personnel (organizational) measure against fraud and error
Key rule: Classify a measure by what it controls, not by the words in it: rooms, doors and keys are physical, system functions are technical, people's roles and behaviour are personnel.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.