In which of the following categories would creating a corporate privacy policy, drafting acceptable use
policies, and group based access control be classified?

A.
Security control frameworks

B.
Best practice

C.
Access control methodologies

D.
Compliance activity

Explanation:
Best practices are based on what is known in the industry and those methods that have consistently
shown superior results over those achieved by other means. Furthermore best practices are applied to all
aspects in the work environment.
Incorrect Answers:
A: Security control frameworks refer to the backbone of SAFE (architecture) and unification is the
underlying key to security which incorporates all ptrs of the network, including the WAN, the extranet,
the Internet, and the intranet.
C: Access control methodologies refer to Mandatory- Discretionary- and Rule-based access control types
that can be implemented.
D: Compliance activity usually comes into focus when a third party involvement is being considered.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, p. 29