Examkin

Soru

Zorluk: OrtaSecurity Control Categories and Types

An enterprise deploys host-based agent software on all employee workstations to continuously monitor volatile memory for anomalous activity and automatically generate alerts for the security operations center upon identifying suspicious API calls. According to CompTIA Security+, which control category and functional type combination does this host-based monitoring software represent?

  1. Technical category and Detective functional typeCevap
  2. B
    Operational category and Preventive functional type
  3. C
    Managerial category and Directive functional type
  4. D
    Technical category and Corrective functional type

Cevap

The host-based monitoring software represents a Technical control category and a Detective functional type.
The correct response identifies the host-based software agent as a Technical control because it relies on software logic operating on the system. Furthermore, its function of continuously observing memory behaviors and emitting alerts classifies it as a Detective control type designed to discover security threats.

Adım Adım Çözüm

1
Determine the security control category.
Because the mechanism is an automated software agent executing on host hardware to analyze system memory, it falls under the Technical (Logical) category.
Technical controls are implemented through software, hardware, or firmware logic.
2
Determine the functional control type.
Because the software monitors for anomalous events and raises alerts for analyst inspection without modifying system configuration or restoring files, its function is Detective.
Detective controls identify and signal malicious activity or policy violations during or after execution.

Anahtar Kavram

Security Control Categories and Types
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Security Control Categories and Types

Bu konudan daha fazla soru