Which of the following is listed as a security domain example?

• A. Event and Incident Management
• B. Data Encryption Standards
• C. Access Control Lists
• D. Physical Security

Answer: (A)

Security domains are broad areas of activity that define where security work happens and who handles it. Event and Incident Management fits as a domain because it covers the overarching processes for handling security events—from detection and analysis to containment, eradication, recovery, and post-incident review. It involves coordination, escalation, documentation, and learning for improvements, which makes it a distinct area of responsibility within a security program.

The other items are specific controls or components rather than broad domains. Data Encryption Standards describe how data should be protected through encryption, rather than a domain of ongoing security activities. Access Control Lists are a mechanism used to enforce access rules, not a standalone domain of operations. Physical Security focuses on protecting facilities and hardware, which is a separate area of security but not the example of a security domain being asked for in this item.