Question

Difficulty: HardSecurity Control Categories and Types

An organization configures an automated endpoint configuration management agent across its cloud instances. The agent continuously monitors system files for unapproved modifications, immediately sends an alert upon detecting a divergence, and automatically restores the altered files back to their authorized baseline state without human intervention. Which of the following best classifies this control by its category and functional type?

  1. Technical category and Corrective functional typeAnswer
  2. B
    Technical category and Detective functional type
  3. C
    Operational category and Corrective functional type
  4. D
    Technical category and Compensating functional type

Answer

The mechanism is classified as a Technical category control and a Corrective functional type.
The system relies on software automation on endpoints to enforce security policies, making it a Technical control. Because it actively reverses unapproved modifications and restores systems to their known-good baseline, its primary function is Corrective.

Step-by-Step Solution

1
Determine the control category (Technical, Managerial, Operational, Physical).
The control is implemented using automated software logic running on system endpoints, which defines it as a Technical (or Logical) control.
Technical controls utilize hardware, software, or firmware mechanisms to enforce security policies.
2
Determine the primary functional control type (Preventive, Deterrent, Detective, Corrective, Compensating, Directive).
The agent actively reverses unauthorized modifications by restoring altered files back to an authorized baseline state, fulfilling a Corrective role.
Corrective controls act after an undesirable event occurs to remediate damage, restore capabilities, or return systems to a normal operational state.

Key Concept

Dual-Axis Control Classification (Category vs. Functional Type)
Estimated Time:1m 30s
Rate this question