Question

Which domain involves keeping data secure by ensuring users follow established policies to control and manage physical assets?

(a) Security and risk management
(b) Identity and access management
(c) Communication and network security
(d) Security assessment and testing

Answer 1

The correct answer is security and risk management, which includes policies and procedures to manage physical assets and ensure data security.

Step-by-step explanation:

The domain that involves keeping data secure by ensuring users follow established policies to control and manage physical assets is security and risk management. This domain focuses on the development and implementation of policies, standards, procedures, and guidelines to ensure a secure environment. Activities can include asset inventory and classification, physical security controls, risk assessments, and management of security operations.