Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

A security analyst is reviewing internal security mechanisms to ensure they are properly classified according to CompTIA Security+ control categories. Which of the following mechanisms are classified as technical security controls? (Select TWO.)

  1. Configuring a Host-based Intrusion Prevention System (HIPS) agent to block malicious memory execution attempts.Answer
  2. B
    Deploying biometric smart locks on server room entry doors to restrict physical access.
  3. Enforcing 802.1X Network Access Control (NAC) on network switches to dynamically authenticate connecting devices.Answer
  4. D
    Conducting monthly manual facility security audits to inspect server room door hinges and perimeter locks.

Answer

Configuring a Host-based Intrusion Prevention System (HIPS) agent and Enforcing 802.1X Network Access Control (NAC) are both technical security controls.
Technical controls (also known as logical controls) consist of software, hardware, firmware, or network protocol mechanisms implemented to safeguard systems and data. Configuring a Host-based Intrusion Prevention System (HIPS) to block malicious process execution and enforcing 802.1X Network Access Control (NAC) to dynamically validate connection attempts both rely directly on automated software logic and network technology to enforce access rules.

Step-by-Step Solution

1
Define technical control category characteristics according to security frameworks.
Technical (logical) controls are safeguards executed through computer hardware, software, firmware, or network protocols.
Control categorization depends on the execution mechanism used to enforce security.
2
Evaluate each option against the technical control definition.
HIPS software and 802.1X network authentication operate automatically via system software and network devices (technical). Biometric door locks guard physical entry (physical), while facility security walk-through audits are procedural tasks performed by personnel (operational).
Distinguishing between technology-enforced, physical facility-enforced, and human-procedural controls yields the correct technical safeguards.

Key Concept

Security Control Categories (Technical, Operational, Physical, Managerial)
Estimated Time:1m 15s
Rate this question

Topics

Security Control Categories and Types

More questions from this topic