Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

An enterprise security team is auditing organizational controls against the CompTIA Security+ framework. Match each implemented security control on the left to its corresponding dual-axis classification (Control Category / Functional Type) on the right.

  • Deploying an inline Web Application Firewall (WAF) to drop malicious HTTP payloadsTechnical / Preventive
  • Conducting enterprise risk assessments and updating corporate information security policiesManagerial / Directive

Answer

The controls are correctly matched as follows: Inline Web Application Firewall matches Technical / Preventive; Enterprise risk assessments and security policy updates match Managerial / Directive; Automated endpoint re-imaging scripts match Technical / Corrective; Biometric retina scanners on facility doors match Physical / Preventive.
Each security mechanism aligns with its specific framework classification: Technical controls utilize hardware/software technologies, Managerial controls establish administrative policies and risk frameworks, and Physical controls protect facilities and tangible assets. Functionally, Preventive controls impede security events, Directive controls specify mandatory actions, and Corrective controls repair damage or restore functionality.

Step-by-Step Solution

1
Determine the primary control category (Technical, Managerial, Operational, Physical) for each item.
Inline WAF and endpoint restoration scripts use technology (Technical); policies and risk assessments use administration/governance (Managerial); retina scanners on physical doors protect tangible property (Physical).
Control categories reflect how a control is implemented within an environment.
2
Determine the functional control type (Preventive, Deterrent, Detective, Corrective, Compensating, Directive) for each item based on its operational purpose.
Inline WAF blocks traffic before entry (Preventive); policies establish required behaviors (Directive); re-imaging scripts repair compromised systems (Corrective); retina scanners stop physical entry (Preventive).
Functional types describe what goal the control accomplishes in response to security risk.
3
Combine category and functional type to form dual-axis pairs and match to right-hand items.
All left items map uniquely to their corresponding dual-axis right-side designations.
Proper classification requires accurate pairing of implementation axis and functional goal.

Key Concept

Security Control Categories and Types
Rate this question

Topics

Security Control Categories and Types

More questions from this topic