Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

Following an internal audit that identified unauthorized workstation software modifications, an enterprise security team deploys an automated configuration management tool. This software continuously monitors workstation configuration files against an established baseline and automatically restores any modified settings back to their approved baseline state. Which of the following best classifies this security control according to CompTIA Security+ category and functional type definitions?

  1. Technical category and Corrective typeAnswer
  2. B
    Technical category and Detective type
  3. C
    Operational category and Preventive type
  4. D
    Managerial category and Compensating type

Answer

Technical category and Corrective type
The security mechanism is classified under the Technical (Logical) category because it is executed by automated software logic and system monitoring tools. It is classified under the Corrective functional type because its primary objective is to reverse unauthorized modifications and restore the system back to its known-good baseline state following an incident.

Step-by-Step Solution

1
Determine the implementation category based on how the control is enforced.
The control is implemented via automated software logic and system configuration tools, placing it in the Technical (Logical) category.
Technical controls use hardware, software, or firmware mechanisms to execute security functions automatically.
2
Analyze the functional outcome of the control when triggered by an unauthorized change.
The tool automatically reverses unauthorized modifications and restores systems to their compliant baseline state.
Functional types that repair damage, reverse unauthorized changes, or restore systems to operational baselines are classified as Corrective controls.
3
Combine the implementation category and functional type.
The mechanism is correctly classified as a Technical category control executing a Corrective functional type.
Combining automated technical execution with post-modification restoration aligns with Technical and Corrective definitions.

Key Concept

Security Control Categories and Functional Types
Estimated Time:1m 15s
Rate this question

Topics

Security Control Categories and Types

More questions from this topic