CompTIA CySA+ (CS0-003) — Question 211

Which of the following is instituting a security policy that users must lock their systems when stepping away from their desks an example of?

Answer options

• A. Configuration management
• B. Compensating control
• C. Awareness, education, and training
• D. Administrative control

Correct answer: D

Explanation

The correct answer is D, as instituting a policy requiring system locks is an administrative control that outlines expected behavior and responsibilities. Options A and B refer to different types of security measures related to system setup and alternative safeguards, while C focuses on user training and awareness rather than policy enforcement.