Soru

Zorluk: ZorSecurity Control Categories and Types

An organization configures an automated endpoint configuration management agent across its cloud instances. The agent continuously monitors system files for unapproved modifications, immediately sends an alert upon detecting a divergence, and automatically restores the altered files back to their authorized baseline state without human intervention. Which of the following best classifies this control by its category and functional type?

  1. Technical category and Corrective functional typeCevap
  2. B
    Technical category and Detective functional type
  3. C
    Operational category and Corrective functional type
  4. D
    Technical category and Compensating functional type

Cevap

The mechanism is classified as a Technical category control and a Corrective functional type.
The system relies on software automation on endpoints to enforce security policies, making it a Technical control. Because it actively reverses unapproved modifications and restores systems to their known-good baseline, its primary function is Corrective.

Adım Adım Çözüm

1
Determine the control category (Technical, Managerial, Operational, Physical).
The control is implemented using automated software logic running on system endpoints, which defines it as a Technical (or Logical) control.
Technical controls utilize hardware, software, or firmware mechanisms to enforce security policies.
2
Determine the primary functional control type (Preventive, Deterrent, Detective, Corrective, Compensating, Directive).
The agent actively reverses unauthorized modifications by restoring altered files back to an authorized baseline state, fulfilling a Corrective role.
Corrective controls act after an undesirable event occurs to remediate damage, restore capabilities, or return systems to a normal operational state.

Anahtar Kavram

Dual-Axis Control Classification (Category vs. Functional Type)
Tahmini Süre:1m 30s
Bu soruyu puanla