Examkin

Soru

Zorluk: ZorSecurity Control Categories and Types

Following a compliance audit, an enterprise security team identifies that a legacy industrial control server hosting critical operational technology cannot support endpoint detection and response (EDR) agents or full-disk encryption due to system resource constraints. To satisfy the security standard without taking the legacy system offline, the team installs a dedicated inline micro-segmentation appliance with access control lists restricted strictly to authorized jump boxes. Which of the following best classifies the security control category and functional type of this newly deployed appliance?

  1. Technical category and compensating control typeCevap
  2. B
    Technical category and corrective control type
  3. C
    Operational category and compensating control type
  4. D
    Managerial category and preventive control type

Cevap

Technical category and compensating control type
The correct response identifies the appliance as a technical control because it relies on network hardware and automated rule logic, and as a compensating control because it provides alternative protection when the primary required security controls (EDR and encryption) cannot be implemented.

Adım Adım Çözüm

1
Determine the security control category based on execution mechanism.
Because an inline micro-segmentation hardware appliance enforcement tool is system-implemented technology, it falls under the Technical control category.
Technical controls (also known as logical controls) use hardware, software, or firmware mechanisms.
2
Determine the functional type based on the strategic objective in the scenario.
The control was implemented to satisfy a security mandatory standard (EDR/encryption) when the primary solution could not be supported by legacy hardware, making it a Compensating control type.
Compensating controls provide an alternative measure that achieves equivalent security protection when primary security controls are unfeasible.

Anahtar Kavram

Dual-axis classification of security control categories and functional types
Bu soruyu puanla

Konular

Security Control Categories and Types

Bu konudan daha fazla soru