iSACA Cybersecurity Fundamentals Certification Practice Exam

Which of the following is a type of control in system hardening?

1. Access control lists

2. Low-level programming techniques

3. Physical layout of hardware

4. Network speed optimization

The correct answer is: Access control lists

Access control lists are a type of control in system hardening because they play a critical role in regulating user permissions and ensuring that only authorized individuals can access specific data or system resources. By defining which users or systems have permission to perform certain operations, access control lists effectively minimize the risk of unauthorized access or data breaches, thereby hardening the system against potential attacks. In the context of system hardening, access control lists are implemented as a first line of defense. They not only help in protecting sensitive information but also in enforcing organizational security policies. The correct implementation of access control lists is essential for establishing a strong security posture. Other options like low-level programming techniques, physical layout of hardware, and network speed optimization do not specifically focus on access control or directly contribute to the hardening of a system's security. Low-level programming techniques relate more to software development practices, physical layout concerns hardware placement and operational efficiency, while network speed optimization is geared towards enhancing performance rather than security measures directly related to system hardening.