問題文
A brewery lists four measures: a signed acceptable use agreement, a locked server cabinet, a rule set on the network gateway, and a background check before hiring. Which grouping by control category is correct?
選択肢
- All four measures are administrative, because each of them exists only because a written company policy requires it and none of them would be in place if that policy had not been approved by the brewery's management.
- The cabinet and the gateway rule set are both physical, because both of them place a barrier in the path of someone who is trying to reach the servers inside the brewery's data room.
- The agreement is administrative, the background check is technical because it relies on a screening service and the cabinet and the rule set are both technical.
- The agreement and the background check are administrative because people and process enforce them, the locked cabinet is physical and the gateway rule set is technical because a device enforces it.