Soru

Zorluk: OrtaSecurity Control Categories and Types

An enterprise facility installs biometric fingerprint readers on all access doors leading into its main server room to explicitly prevent unauthorized personnel from physically touching server hardware. How should the security team classify this access mechanism based on CompTIA Security+ control category and functional type definitions?

  1. Physical category and Preventive functional typeCevap
  2. B
    Physical category and Detective functional type
  3. C
    Technical category and Preventive functional type
  4. D
    Managerial category and Directive functional type

Cevap

Physical category and Preventive functional type
The classification as Physical and Preventive is correct because physical door access hardware restricts tangible access to facilities (Physical category) and actively blocks unauthorized personnel from gaining entry (Preventive functional type).

Adım Adım Çözüm

1
Determine the security control category based on implementation domain
Because fingerprint scanners are physical hardware devices securing tangible facility infrastructure (server room doors), the control falls into the Physical category.
Control categories distinguish between Technical (logical/software), Managerial (administrative/policy), Operational (human processes), and Physical (facility/tangible) security elements.
2
Determine the functional control type based on intended operation
Because the mechanism actively denies entry to unauthenticated individuals, it serves a Preventive function.
Preventive controls aim to deter or actively stop security breaches before they occur, unlike Detective controls which identify active or past incidents.

Anahtar Kavram

Classification of security controls by category (Technical, Managerial, Operational, Physical) and functional type (Preventive, Detective, Corrective, Deterrent, Compensating, Directive).
Bu soruyu puanla