Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

A cloud development team integrates an automated scanner into a continuous integration and continuous deployment (CI/CD) pipeline to check Infrastructure-as-Code (IaC) templates for misconfigurations. When the scanner identifies high-risk security flaws, it automatically terminates the build job, stopping non-compliant infrastructure from being deployed into the live cloud environment. According to security control classifications, which category and functional type pair best describes this automated scanner gate?

  1. Technical and PreventiveAnswer
  2. B
    Technical and Detective
  3. C
    Operational and Deterrent
  4. D
    Managerial and Directive

Answer

Technical and Preventive
The option specifying 'Technical and Preventive' is correct because the scanner relies on software automation and system logic to enforce security policies (Technical category) and actively prevents misconfigured code from being deployed into the live environment (Preventive functional type).

Step-by-Step Solution

1
Determine the primary control category based on execution mechanism.
Because the control is implemented through automated software, security scripts, and CI/CD tooling rather than human processes or administrative policies, it belongs to the Technical (Logical) category.
Technical controls utilize hardware, software, or firmware mechanisms to enforce security rules.
2
Determine the functional control type based on the operational objective.
Because the pipeline gate halts execution to ensure insecure code never reaches the live production environment, its objective is to prevent security incidents from taking place.
Preventive controls stop unauthorized actions or vulnerabilities before impact occurs.
3
Synthesize category and functional type into the combined classification.
The control is classified as Technical and Preventive.
Combines technological execution (Technical) with proactive intervention (Preventive).

Key Concept

Security Control Categories and Functional Types
Rate this question

Topics

Security Control Categories and Types

More questions from this topic