SANS Security's Foundation Practice Test

The correct choice reflects the classification of security controls that involve technology to protect resources. Technical controls encompass tools and measures that use technology to safeguard information systems and networks. Firewalls and antivirus software are prime examples of this category as they rely on software and hardware mechanisms to monitor, filter, and control network traffic and safeguard systems from malicious software.

These tools work by enforcing security policies through various means, such as blocking unauthorized access to networks (firewalls) and detecting and removing harmful software (antivirus programs). This proactive technological approach is essential in defending against cyber threats, demonstrating the role that technical controls play in a comprehensive security strategy.

In contrast, physical controls refer to tangible measures like locks and surveillance cameras that protect physical assets, while administrative controls involve policies, procedures, and training to manage security at an organizational level. Operational controls focus on the day-to-day operations and activities that support security measures, such as incident response planning and maintenance of systems. Each of these categories serves its purpose in the broader security framework, but technical controls specifically address threats through technological means.