Examkin

Question

Difficulty: HardSecurity Control Categories and Types

Following a compliance audit, an enterprise security team identifies that a legacy industrial control server hosting critical operational technology cannot support endpoint detection and response (EDR) agents or full-disk encryption due to system resource constraints. To satisfy the security standard without taking the legacy system offline, the team installs a dedicated inline micro-segmentation appliance with access control lists restricted strictly to authorized jump boxes. Which of the following best classifies the security control category and functional type of this newly deployed appliance?

  1. Technical category and compensating control typeAnswer
  2. B
    Technical category and corrective control type
  3. C
    Operational category and compensating control type
  4. D
    Managerial category and preventive control type

Answer

Technical category and compensating control type
The correct response identifies the appliance as a technical control because it relies on network hardware and automated rule logic, and as a compensating control because it provides alternative protection when the primary required security controls (EDR and encryption) cannot be implemented.

Step-by-Step Solution

1
Determine the security control category based on execution mechanism.
Because an inline micro-segmentation hardware appliance enforcement tool is system-implemented technology, it falls under the Technical control category.
Technical controls (also known as logical controls) use hardware, software, or firmware mechanisms.
2
Determine the functional type based on the strategic objective in the scenario.
The control was implemented to satisfy a security mandatory standard (EDR/encryption) when the primary solution could not be supported by legacy hardware, making it a Compensating control type.
Compensating controls provide an alternative measure that achieves equivalent security protection when primary security controls are unfeasible.

Key Concept

Dual-axis classification of security control categories and functional types
Rate this question

Topics

Security Control Categories and Types

More questions from this topic