Examkin

Question

Difficulty: EasySecurity Control Categories and Types

A security team deploys automated log parsing software that continuously analyzes server event logs to identify and flag unauthorized login attempts as they occur. Which functional control type is best demonstrated by this measure?

  1. Detective controlAnswer
  2. B
    Corrective control
  3. C
    Directive control
  4. D
    Deterrent control

Answer

The measure is best classified as a Detective control.
The correct answer is the detective control because automated log parsing software functions to discover and report unauthorized activity, which aligns directly with the goal of detective controls under CompTIA Security+ framework definitions.

Step-by-Step Solution

1
Analyze the primary function of the security control in the scenario.
The control scans server logs to spot and flag unauthorized login attempts as they happen.
Identifying the operational objective of a control determines its functional classification.
2
Map the security objective to CompTIA Security+ functional control types.
Controls designed to observe, log, analyze, and alert on security events are defined as detective controls.
Detective mechanisms focus on threat discovery and event identification rather than prevention, deterrence, or remediation.

Key Concept

Security Control Functional Types (Detective Controls)
Rate this question

Topics

Security Control Categories and Types

More questions from this topic