Examkin

Question

Difficulty: MediumSecurity Control Categories and Types

An enterprise deploys host-based agent software on all employee workstations to continuously monitor volatile memory for anomalous activity and automatically generate alerts for the security operations center upon identifying suspicious API calls. According to CompTIA Security+, which control category and functional type combination does this host-based monitoring software represent?

  1. Technical category and Detective functional typeAnswer
  2. B
    Operational category and Preventive functional type
  3. C
    Managerial category and Directive functional type
  4. D
    Technical category and Corrective functional type

Answer

The host-based monitoring software represents a Technical control category and a Detective functional type.
The correct response identifies the host-based software agent as a Technical control because it relies on software logic operating on the system. Furthermore, its function of continuously observing memory behaviors and emitting alerts classifies it as a Detective control type designed to discover security threats.

Step-by-Step Solution

1
Determine the security control category.
Because the mechanism is an automated software agent executing on host hardware to analyze system memory, it falls under the Technical (Logical) category.
Technical controls are implemented through software, hardware, or firmware logic.
2
Determine the functional control type.
Because the software monitors for anomalous events and raises alerts for analyst inspection without modifying system configuration or restoring files, its function is Detective.
Detective controls identify and signal malicious activity or policy violations during or after execution.

Key Concept

Security Control Categories and Types
Estimated Time:1m 0s
Rate this question

Topics

Security Control Categories and Types

More questions from this topic