Soru

Zorluk: KolaySecurity Control Categories and Types

A security team deploys automated log parsing software that continuously analyzes server event logs to identify and flag unauthorized login attempts as they occur. Which functional control type is best demonstrated by this measure?

  1. Detective controlCevap
  2. B
    Corrective control
  3. C
    Directive control
  4. D
    Deterrent control

Cevap

The measure is best classified as a Detective control.
The correct answer is the detective control because automated log parsing software functions to discover and report unauthorized activity, which aligns directly with the goal of detective controls under CompTIA Security+ framework definitions.

Adım Adım Çözüm

1
Analyze the primary function of the security control in the scenario.
The control scans server logs to spot and flag unauthorized login attempts as they happen.
Identifying the operational objective of a control determines its functional classification.
2
Map the security objective to CompTIA Security+ functional control types.
Controls designed to observe, log, analyze, and alert on security events are defined as detective controls.
Detective mechanisms focus on threat discovery and event identification rather than prevention, deterrence, or remediation.

Anahtar Kavram

Security Control Functional Types (Detective Controls)
Bu soruyu puanla