cisco certification last extension

cisco certification last extension.Technical access controls: Also known as logical controls, these are access controls that are generally defined in administrative access controls that are implemented and enforced by all logical and technical systems deployed in place. Deployment of firewalls, intrusion detection systems, remote access servers, identity management systems ,190 Chapter 4 Introduction to Access Controland turning on encryption are all technical access control measures.In addition to the above categorization, access control measures can be categorized by purpose and can be classified as preventive, detective, corrective, deterrent, restorative, and remedial access control measures, as shown below. Both methods can be used to classify access control measures. Let's say that encrypting static data is both a technical access control measure and a preventive access control measure that prevents unauthorized access to the data itself...... Turtle 20 Preventive access control measures (preventivecontrol): refers to the enforcement of security systems to preventThe only way to avoid preventive access control measures is to have them in place. The only way to circumvent preventive access controls is to exploit gaps at the implementation or logical level. Such access controls are generally required to be imposed. Configuring access control lists, setting passwords, and enabling access control are all preventive access control measures.Deterrentcontrol: The primary purpose is to prevent security incidents from occurring and is similar to preventive access controls. However, the difference between the two is that the basic principle of deterrent access control measures is to prevent an attacker from continuing to take action if access control measures are in place. For example, a system banner warning (systembannerwarning) that pops up to alert everyone that any unauthorized login attempts will be monitored and punished would be a deterrent control. In fact, this only deters regular users from attempting to access the system, not determined attackers from attempting to log in.Detectivecontrol: This is used to monitor and detect any unauthorized actions or hazards. Such access controls typically generate alert messages when several others (e.g., preventive, deterrent, remedial access controls) fail. When an attack occurs, detective access controls come to the forefront of their power and are very useful for post-incident investigation and analysis of what exactly happened in a security incident. Turning on audit logs, deploying intrusion detection systems, performing motion detection, and enabling security information and event management mechanisms are all considered detective access controls.Corrective control: Includes all access controls used to correct problems during a security incident. Quarantining infected computers, having security guards stop intruders, and firing employees who do not comply with the security system are all corrective access controls. Recovery access controls (recoverycontrol): Used after an environment or system has been modified due to unauthorized access or other reasons, with the primary goal of restoring the original state. Performing backups, implementing system redundancy, and developing disaster recovery plans are all recovery access controls.