CompTIA Security+

A company installs security cameras throughout its office building to discourage unauthorized access. What type of security control is this?

• APreventive technical control
• BDetective physical control
• CDeterrent physical control
• DCompensating administrative control

A help desk follows a documented manual procedure to verify a caller's identity before resetting a password. Which category and type of control does this represent?

• ATechnical preventive control
• BOperational preventive control
• CPhysical detective control
• DManagerial corrective control

After a firewall rule is found to be too restrictive for a critical business application, the security team implements a proxy-based workaround that still enforces security policies. What type of control is this proxy solution?

• ACorrective control
• BPreventive control
• CCompensating control
• DDirective control

A SIEM system generates an alert when it detects unusual login patterns from a user account. What type of security control does the SIEM represent in this scenario?

• APreventive technical control
• BDetective technical control
• CCorrective technical control
• DDeterrent administrative control

Following a malware infection, the IT team restores affected systems from clean backups. What type of security control does this backup restoration represent?

• APreventive control
• BDetective control
• CCorrective control
• DCompensating control

A security architect is designing a defense strategy that uses firewalls at the network perimeter, host-based intrusion detection on servers, and endpoint protection on workstations. Which security principle does this approach best illustrate?

• ALeast privilege
• BDefense in depth
• CZero trust
• DSeparation of duties

An organization classifies its security controls into categories: managerial, operational, and technical. A policy requiring background checks for new hires falls under which category?

• ATechnical control
• BOperational control
• CManagerial (administrative) control
• DPhysical control

A security team deploys a honeypot server designed to appear as a vulnerable database server. What is the PRIMARY control type this honeypot serves?

• APreventive control
• BDeterrent control
• CDetective control
• DCorrective control

A hospital encrypts all patient records stored in its database to ensure only authorized medical staff can read the information. Which element of the CIA triad is this primarily protecting?

• AConfidentiality
• BIntegrity
• CAvailability
• DNon-repudiation

A financial institution implements checksums and digital signatures on all wire transfer instructions. Which element of the CIA triad is being primarily addressed?

• AConfidentiality
• BIntegrity
• CAvailability
• DAuthentication

An e-commerce company deploys redundant web servers, load balancers, and database clustering to ensure its online store remains operational during peak traffic and server failures. Which CIA triad element is the primary focus?

• AConfidentiality
• BIntegrity
• CAvailability
• DNon-repudiation

An attacker modifies data in transit between a client application and a server without either party's knowledge. Which element of the CIA triad has been compromised?

• AConfidentiality
• BIntegrity
• CAvailability
• DAccountability

A double-extortion ransomware attack first exfiltrates files and then encrypts the copies on a company's file server, making them inaccessible to employees. Which TWO elements of the CIA triad are MOST directly affected?

• AConfidentiality and integrity
• BIntegrity and availability
• CConfidentiality and availability
• DAvailability and non-repudiation