Examkin

Soru

Zorluk: OrtaSecurity Control Categories and Types

A security operations team configures an isolated decoy server populated with simulated confidential files on an internal subnet. The server is designed to attract unauthorized intruders who have breached the perimeter, allowing analysts to log their activities and gather telemetry on their attack techniques without exposing production data. Which of the following security control classifications correctly identifies both the category and functional type of this deployment?

  1. Technical category and Detective functional typeCevap
  2. B
    Technical category and Preventive functional type
  3. C
    Operational category and Deterrent functional type
  4. D
    Technical category and Corrective functional type

Cevap

Technical category and Detective functional type
A decoy server (honeypot) is built using software tools and system configurations, placing it squarely in the Technical control category. Its core functional objective is to capture attacker activity and issue alerts when accessed, which classifies it as a Detective control.

Adım Adım Çözüm

1
Determine the security control category based on implementation method.
Since the decoy server is deployed using operating systems, software services, and network configurations, it falls under the Technical (Logical) control category.
Technical controls are implemented using hardware, software, or firmware mechanisms.
2
Determine the functional control type based on the primary objective of the deployment.
The primary goal is to observe, record, and alert on unauthorized intruder activity within the environment, which defines a Detective control type.
Detective controls operate to identify and log unauthorized activities during or after an intrusion attempt.

Anahtar Kavram

Security Control Categories and Functional Types
Bu soruyu puanla

Konular

Security Control Categories and Types

Bu konudan daha fazla soru