Question

Difficulty: MediumSecurity Control Categories and Types

Following an assessment of remote access risks, a network administrator mandates that all system administrators must use hardware security keys to perform multi-factor authentication when logging into administrative portals. Which of the following combinations correctly identifies the control category and functional control type of the hardware security keys?

  1. Technical control executed as a preventive functional typeAnswer
  2. B
    Technical control executed as a detective functional type
  3. C
    Operational control executed as a corrective functional type
  4. D
    Managerial control executed as a compensating functional type

Answer

Technical control executed as a preventive functional type
Hardware security keys are technical (logical) controls because they rely on hardware and cryptographic software mechanisms to verify identity. They function as a preventive control type because they block unauthorized access to systems before an intruder can gain entry.

Step-by-Step Solution

1
Determine the control category by evaluating how the control is implemented.
Hardware security keys rely on technology, cryptography, and automated software/hardware enforcement rather than administrative policies or human operational procedures, classifying them as a Technical control.
Technical controls (also known as logical controls) use hardware, software, or firmware mechanisms to enforce security rules.
2
Determine the functional control type by analyzing the objective of the mechanism.
Multi-factor authentication via hardware security keys stops unauthorized users from gaining access to administrative portals before any unauthorized access occurs, classifying it as a Preventive control type.
Preventive controls aim to deter or prevent security incidents from happening.

Key Concept

Security Control Categories and Functional Types
Estimated Time:1m 0s
Rate this question