An organization updates its enterprise defense baseline to satisfy compliance requirements. As part of this initiative, the security team deploys an inline Network Intrusion Prevention System (NIPS) to automatically drop unauthorized network traffic, and publishes an updated Acceptable Use Policy (AUP) mandating clean desk and screen lock procedures for all staff members.
Which of the following statements correctly classify these security controls according to CompTIA Security+ categories and functional types? (Select TWO.)
- The inline NIPS is classified as a technical category control with a preventive functional type.Answer
- BThe inline NIPS is classified as an operational category control with a detective functional type.
- The Acceptable Use Policy is classified as a managerial category control with a directive functional type.Answer
- DThe Acceptable Use Policy is classified as a physical category control with a compensating functional type.
Answer
The inline Network Intrusion Prevention System (NIPS) is a technical category control with a preventive functional type, and the Acceptable Use Policy (AUP) is a managerial category control with a directive functional type.
The inline Network Intrusion Prevention System (NIPS) relies on software and hardware mechanisms to automatically inspect and drop unauthorized traffic before it breaches the perimeter, classifying it as a technical control with a preventive functional type. The Acceptable Use Policy (AUP) is an administrative document created by leadership to mandate user behavior and compliance, classifying it as a managerial control with a directive functional type.
Step-by-Step Solution
Key Concept
Classification of security mechanisms by primary category (technical, managerial, operational, physical) and functional type (preventive, detective, corrective, deterrent, compensating, directive).