Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

Match each enterprise security implementation to its primary CompTIA Security+ classification by category and functional type.

  • Installing motion-activated floodlights and warning signs along the perimeter fence line of a remote data center facility.Physical / Deterrent
  • Deploying a host-based file integrity monitoring (FIM) agent to inspect critical system files for unauthorized changes.Technical / Detective
  • Formalizing an enterprise incident response policy and standard operating procedures (SOPs) mandated by management.Managerial / Directive
  • Executing automated endpoint quarantine and running malware cleanup scripts to restore infected systems back to a known good state.Technical / Corrective

Answer

1. Installing motion-activated floodlights and warning signs matches Physical / Deterrent.
2. Deploying host-based file integrity monitoring (FIM) matches Technical / Detective.
3. Formalizing an enterprise incident response policy and SOPs matches Managerial / Directive.
4. Executing automated endpoint quarantine and malware cleanup scripts matches Technical / Corrective.
Each security implementation correctly pairs its underlying mechanism (category: Technical, Managerial, Operational, Physical) with its operational purpose (functional type: Preventive, Deterrent, Detective, Corrective, Compensating, Directive) according to standard CompTIA Security+ SY0-701 guidelines.

Step-by-Step Solution

1
Analyze the physical perimeter control (floodlights and signage).
Identified as a physical mechanism (Physical category) intended to discourage attackers before an action occurs (Deterrent functional type).
Physical elements protecting tangible assets that discourage breach attempts align with Physical / Deterrent.
2
Analyze the host-based software control (File Integrity Monitoring).
Identified as a system/software mechanism (Technical category) designed to discover anomalous modifications (Detective functional type).
Software-driven monitoring tools that alert on system compromise function as Technical / Detective controls.
3
Analyze the governance document (incident response policy and SOPs).
Identified as administrative oversight (Managerial category) that mandates expected security practices (Directive functional type).
Framework policies set by leadership to dictate compliant behavior are Managerial / Directive.
4
Analyze the remediation action (quarantine and cleanup scripts).
Identified as a software automated response (Technical category) aimed at reversing harm and restoring operations (Corrective functional type).
Automated technical actions taken post-incident to fix compromised endpoints fit Technical / Corrective.

Key Concept

Classification of Security Control Categories (Technical, Managerial, Operational, Physical) and Functional Types (Preventive, Deterrent, Detective, Corrective, Compensating, Directive)
Rate this question

Topics

Security Control Categories and Types

More questions from this topic