Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

A security operations team configures an isolated decoy server populated with simulated confidential files on an internal subnet. The server is designed to attract unauthorized intruders who have breached the perimeter, allowing analysts to log their activities and gather telemetry on their attack techniques without exposing production data. Which of the following security control classifications correctly identifies both the category and functional type of this deployment?

  1. Technical category and Detective functional typeAnswer
  2. B
    Technical category and Preventive functional type
  3. C
    Operational category and Deterrent functional type
  4. D
    Technical category and Corrective functional type

Answer

Technical category and Detective functional type
A decoy server (honeypot) is built using software tools and system configurations, placing it squarely in the Technical control category. Its core functional objective is to capture attacker activity and issue alerts when accessed, which classifies it as a Detective control.

Step-by-Step Solution

1
Determine the security control category based on implementation method.
Since the decoy server is deployed using operating systems, software services, and network configurations, it falls under the Technical (Logical) control category.
Technical controls are implemented using hardware, software, or firmware mechanisms.
2
Determine the functional control type based on the primary objective of the deployment.
The primary goal is to observe, record, and alert on unauthorized intruder activity within the environment, which defines a Detective control type.
Detective controls operate to identify and log unauthorized activities during or after an intrusion attempt.

Key Concept

Security Control Categories and Functional Types
Rate this question

Topics

Security Control Categories and Types

More questions from this topic