A lock is a device that prevents a physical structure (typically a door) from being opened, indicating that only the authorized person (i.e. the person with the key) can open it. A fence or a barrier will prevent ALL access. Turnstiles are physical barriers that can be easily overcome (after all, it is common knowledge that intruders can easily jump over a turnstile when no one is watching). 

Clearing is a method used to eliminate the residual physical effects of writing original values to a storage

device. This process involves overwriting the data with zeros or ones to ensure the original data cannot

be retrieved. For example, when a hard disk is erased, all previously stored data is overwritten, making it

impossible to recover the original data (see ISC2 Study Guide, Chapter 5, Module 1).

On the other hand, purging is more rigorous than wiping, in which the storage media is declassified to be

used in a less secure environment. Destruction physically destroys the storage media so it cannot be

used again. Overwriting is used in the wiping process, but it does not remove the remaining physical

effects. It is part of the wiping process, not a stand-alone method.

Configuration management ensures that all changes made to a system are authorized and validated (see ISC2 Study Guide, Domain 5). For example, when a software update is proposed for a system, Configuration Management ensures that the update is approved and tested to confirm that it works as expected and does not introduce new vulnerabilities. The remaining options do not accurately represent what Configuration Management guarantees. Suggesting that changes are unauthorized is contrary to the purpose of Configuration Management. Suggesting that changes are invalid is also incorrect; Configuration Management validates changes to ensure that they work as expected and do not compromise the security of the system. 

Risk acceptance is a component of the risk management process that involves recognizing when it may be more practical or cost-effective to accept a certain level of risk rather than attempting to eliminate it entirely (see ISC2 Study Guide, Module 2, under Risk Treatment). This decision is an informed choice typically based on the organization's risk appetite and on carefully analyzing the potential costs and benefits of implementing additional controls or countermeasures. By contrast, implementing controls and countermeasures to eliminate all risks, ignoring potential risks and their impacts, and avoiding the need for a risk management process are all incorrect options, as these approaches do not accurately describe the concept of informed choice underlying risk acceptance. 

IPSec (Internet Protocol Security) operates atLayer 3 – the Network Layerof the OSI model. IPSec is designed to secure IP communications by authenticating and encrypting each IP packet in a data stream. Because it works directly with IP packets, it naturally fits at the network layer.

The post-incident phase focuses on documenting lessons learned, improving controls, and preventing recurrence.

Buffer overflow attacks target applications, exploiting improper memory handling. Applications operate atLayer 7 (Application Layer), making it the primary target.

An IPSec replay attack occurs when an attacker captures legitimate encrypted packets and attempts to retransmit (replay) them to gain unauthorized access or disrupt communication. The attacker does not need to decrypt the packets; instead, they rely on resending previously valid packets within an existing session.

BCPs should be testedroutinely(e.g., tabletop, simulations) to ensure readiness and relevance.

A Business Continuity Plan is enacted when an organization experiences aloss or disruption of critical business operations. The goal of BCP is to ensure that essential business functions continue or are quickly restored, regardless of the cause of the disruption.