Security Controls - CompTIA Security+ SY0-701 - 1.1

Question 1

Technical controls

Answer 1

Controls using systems

operating system controls

Fire walls/anti-virus

Question 2

Managerial controls

Answer 2

admin controls that go with security design/implementation

security polices/stand op procedurees

Question 3

Operational controls

Answer 3

controls implemented by people instead of systems

Question 4

Physical Controls

Answer 4

Limit physical access

guard shack

Fences, locks

badge readers

Question 5

Preventive controls examples

Answer 5

technical=fire wall

managerial=on-boarding policy

operational=guard shack

Physical=door lock

Question 6

Deterrent control

Answer 6

discourage an intrusion attempt

does not directly prevent access

Question 7

Make an attacker think twice (Deterrent prt2)

Answer 7

app splash screen

threat of demotion

front desk reception

posted warning signs

Question 8

Deterrent examples prt 3

Answer 8

Technical=splash screen

managerial=demotion

operational = reception desk

physical=warning signs

Question 9

Detective control types

Answer 9

identify/log intrusion attempts

collect review system logs

login reports

patrol property

enable motion detectors

Question 10

detective control examples

Answer 10

Technical = sys logs

managerial = review login reports

operational=property patrols

physical = motion detectors

Question 11

Corrective controls types

Answer 11

apply a control after the vent has been detected

reverse the impact

continue operating with minimal downtime

Question 12

corrective control examples

Answer 12

technical=restoring back ups mitigate a ransomware infection

managerial=polices for reporting issues

operational=contact authorities

physical =fire extinguisher

Question 13

compensating control types

Answer 13

control using other means

existing controls aren’t sufficient

may be temporary

Question 14

compensating control type examples

Answer 14

tech=firewall blocks specific apps

managerial=separation of duties

operational=require multiple security staff

physical = power generator

Question 15

Directive control types

Answer 15

direct a subject towards a security compliance

a week security control

Question 16

directive control examples

Answer 16

tech=store all sensitive files in a protected folder

managerial = compliance polices/procedures

operational=train users security policy

physical=sign “authorized personnel only”