How this works
Read a control, then tick every goal it serves. Most serve one. Seven of the eighteen serve
more than one, so do not assume the answer is a single tick.
Select Check this control to see the reasoning straight away. You can clear
any control and try it again as often as you like.
Nothing here is graded and nothing is recorded. This activity is for working out
the idea while it is still in front of you in the chapter.
The controls
Work in any order. The question for each is not what the control is called, but
what would be lost if it were removed.
0 of 18 checked
0 right on the first try
Start over
Control 1 of 18 Full disk encryption on a laptop
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 2 of 18 Comparing a downloaded installer against its published SHA-256 hash
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 3 of 18 An uninterruptible power supply in the server room
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 4 of 18 A digital signature on a software update
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 5 of 18 A load balancer distributing traffic across web servers
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 6 of 18 RAID 1 mirrored disks in a file server
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 7 of 18 A privacy filter on a laptop screen in an airport
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 8 of 18 A recovery site in a different region
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 9 of 18 Labelling documents as public, internal or restricted
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 10 of 18 A denial of service mitigation service in front of a public website
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 11 of 18 Audit logging of every access to a patient record
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 12 of 18 Nightly backups kept for thirty days
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 13 of 18 Transport Layer Security on a web session
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 14 of 18 Role-based access control on a shared drive
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 15 of 18 Multifactor authentication on staff accounts
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 16 of 18 A change management approval process
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 17 of 18 Automatic screen lock after five minutes idle
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again
Control 18 of 18 Badge readers and an access vestibule at the data centre entrance
Which goals does this control serve? Choose every one that applies.
Check this control
Clear and try again