1.1 - Security control categories and types
Security+ SY0-701 objective 1.1 covers how security controls are categorised and classified. By category, a control is technical (enforced by technology, like antivirus in the OS), managerial (policies and risk decisions), operational (run by people, like guard rotations) or physical (locks, fences, cameras). By functional type, a control is preventive (stops an event), deterrent (discourages an actor, like a warning sign), detective (records or alerts, like a camera that watches but does not stop entry), corrective (fixes or restores after an event, like a backup generator), compensating (an alternative when the primary control is not feasible) or directive (guides behaviour). Expect scenario questions that describe a control in action and ask for its correct category and type - the two dimensions are tested together, so learn both labels for each example.
Two dimensions: CATEGORY = technical / managerial / operational / physical. TYPE = preventive, deterrent, detective, corrective, compensating, directive. A camera that only records = detective; a warning sign = deterrent; a backup generator = corrective.
Practice questions
1. Antivirus software enforcing security in the OS is which control category?
- Managerial control
- Technical control (correct answer)
- Physical control
- Operational control
Technical (logical) controls are enforced by technology (antivirus, firewalls, encryption). Managerial=policies, operational=processes/people, physical=locks/guards.
2. A camera that records who enters a room but does not stop them is which control type?
- Preventive control
- Detective control (correct answer)
- Corrective control
- Compensating control
A detective control identifies/records events after or as they occur (cameras, logs, IDS). Preventive stops them; corrective fixes after; compensating substitutes.
3. A warning sign stating the area is monitored, meant to discourage intruders, is which control type?
- Corrective control
- Deterrent control (correct answer)
- Detective control
- Compensating control
A deterrent control discourages an attacker (warning signs, visible guards, fences). It doesn't stop or detect — it aims to change the actor's decision.
4. A backup generator that restores power after an outage caused an issue is which control type?
- Preventive control
- Corrective control (correct answer)
- Deterrent control
- Detective control
A corrective control acts after an incident to restore normal operations (backup restore, generator, patch). Preventive stops it; detective spots it; deterrent discourages.
5. A locked server-room door that physically stops unauthorized entry is which control category AND function?
- Technical and detective
- Managerial and corrective
- Physical and preventive (correct answer)
- Operational and deterrent
A locked door is a physical control (category) that is preventive (function) because it stops unauthorized access before it happens. Categories and functions are separate axes.
6. A company posts a warning sign: '24/7 video surveillance in effect.' The sign itself functions PRIMARILY as which control?
- A corrective control
- A deterrent control (correct answer)
- A detective control
- A compensating control
The sign discourages would-be intruders — a deterrent. The cameras themselves are detective (they record). Distinguish the function of the sign (deter) from the camera (detect).