Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

An enterprise facility installs biometric fingerprint readers on all access doors leading into its main server room to explicitly prevent unauthorized personnel from physically touching server hardware. How should the security team classify this access mechanism based on CompTIA Security+ control category and functional type definitions?

  1. Physical category and Preventive functional typeAnswer
  2. B
    Physical category and Detective functional type
  3. C
    Technical category and Preventive functional type
  4. D
    Managerial category and Directive functional type

Answer

Physical category and Preventive functional type
The classification as Physical and Preventive is correct because physical door access hardware restricts tangible access to facilities (Physical category) and actively blocks unauthorized personnel from gaining entry (Preventive functional type).

Step-by-Step Solution

1
Determine the security control category based on implementation domain
Because fingerprint scanners are physical hardware devices securing tangible facility infrastructure (server room doors), the control falls into the Physical category.
Control categories distinguish between Technical (logical/software), Managerial (administrative/policy), Operational (human processes), and Physical (facility/tangible) security elements.
2
Determine the functional control type based on intended operation
Because the mechanism actively denies entry to unauthenticated individuals, it serves a Preventive function.
Preventive controls aim to deter or actively stop security breaches before they occur, unlike Detective controls which identify active or past incidents.

Key Concept

Classification of security controls by category (Technical, Managerial, Operational, Physical) and functional type (Preventive, Detective, Corrective, Deterrent, Compensating, Directive).
Rate this question

Topics

Security Control Categories and Types

More questions from this topic