The following are critical security aspects of operations controls except for:
A.
Controls over hardware
B.
Data media used
C.
Privileged-entity control
D.
Environmental controls
Explanation:
Environmental controls are a part of physical security.
Remember question 1367? Let me help you recall. Monitoring temperature and humidity levels in equipment rooms is a critical security control that operations groups must achieve. What type of control is this? Answer: Environmental. But in the case of the question at hand, 1445, environmental controls no longer have anything to do with critical security aspects of operations controls. Typically the ‘correct’ answers to this kind of questions is subject to the individual preference of the question maker. These questions don’t test anything.
0
0
YEAH! You should totally write to ISC^2 about it!!
0
0
D is not an acceptable answer:
“The operations department is also responsible for a majority of the items covered in chapter 5 (Physical and environmental security chapter). This includes server room temperature and humidity, fire protection, heating, ventilation, air conditioning, power sources… you need to make sure you understand that these responsibilities fall within the operations department.”
source: All in one cissp, shon harris sixth edition, p.1278
0
0