Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

A security analyst is evaluating enterprise security mechanisms to classify them according to CompTIA Security+ functional control types. Which of the following examples correctly pair a security control with its primary functional control type? (Select TWO).

  1. Motion sensors installed in a server room to alert security personnel upon unauthorized physical entry function as a detective control.Answer
  2. Security policies mandating annual employee security awareness training prior to system access function as a directive control.Answer
  3. C
    An inline Network Intrusion Prevention System (NIPS) configured to drop malicious traffic functions as a detective control.
  4. D
    A high-interaction honeypot deployed on an isolated segment to lure attackers functions as a preventive control.

Answer

The motion sensors functioning as a detective control and security policies functioning as a directive control are the two correct functional control pairings.
Motion sensors detect physical intrusion events and alert monitoring staff, which satisfies the definition of a detective control. Security policies mandating security awareness training establish required behaviors and compliance expectations, satisfying the definition of a directive control.

Step-by-Step Solution

1
Analyze each security control scenario against the functional control categories defined by CompTIA Security+ (preventive, detective, corrective, deterrent, compensating, directive).
Motion sensors detect motion and alert security (detective). Organizational security training policies mandate behavior (directive). An inline NIPS actively blocks malicious traffic (preventive). A honeypot observes threat actor activity (detective).
Functional control types are categorized by their operational objective during an security event lifecycle.
2
Identify the two accurate control and functional type combinations.
Motion sensors as detective controls and security policies as directive controls are correct.
An inline NIPS is misclassified as detective when its active blocking role makes it preventive, and a honeypot is misclassified as preventive when its decoy logging function makes it detective.

Key Concept

Security Control Functional Types
Estimated Time:1m 30s
Rate this question

Topics

Security Control Categories and Types

More questions from this topic