An organization is categorizing its security controls based on CompTIA Security+ implementation categories (Technical, Managerial, Operational, Physical) and functional types (Preventive, Deterrent, Detective, Corrective, Compensating, Directive). Match each implemented security control on the left with its correct dual-classification on the right.
- Restoring system operations from air-gapped immutable backups following a ransomware incidentTechnical category and Corrective type
- Posting high-visibility warning signs along a perimeter fence stating that unauthorized entry triggers prosecutionPhysical category and Deterrent type
- Publishing an enterprise-wide security governance document mandating acceptable asset usage practicesManagerial category and Directive type
- Deploying passive Network Intrusion Detection System (NIDS) sensors to monitor core traffic for anomalous patternsTechnical category and Detective type
Answer
Restoring backups matches Technical category and Corrective type; warning signs match Physical category and Deterrent type; security policy documentation matches Managerial category and Directive type; passive NIDS sensors match Technical category and Detective type.
Each mechanism aligns directly with its primary implementation axis and operational goal: system restoration via backups is Technical and Corrective; physical signage dissuading entry is Physical and Deterrent; administrative usage policies are Managerial and Directive; and passive network intrusion monitoring is Technical and Detective.
Step-by-Step Solution
Key Concept
Dual-axis security control classification under CompTIA Security+ SY0-701.