Domain 5/Objective 5.1 Security Controls

An organization installs biometric authentication systems to enhance access control. What category of security controls do biometric systems fall under?

• Managerial

• Operational

• Technical

• Physical

An organization experienced a data breach, and the incident response team is working to contain and recover from the incident. What type of control is crucial in this situation?

• Preventative

• Detective

• Corrective

• Deterrent

To discourage potential attackers, a company installs visible security cameras at its facility. What type of control is this?

• Preventative

• Detective

• Corrective

• Deterrent

A company, in response to a persistent cyber threat, implements additional security measures to compensate for the existing controls. What type of control is being applied?

• Preventative

• Detective

• Corrective

• Compensating

A company wants to reduce the risk of unauthorized access to its confidential data. What type of security control should be implemented?

• Preventative

• Detective

• Corrective

• Deterrent

An organization operates in an environment with a high risk of natural disasters. To protect critical infrastructure, it invests in reinforced buildings and disaster recovery sites. What type of control is applied?

• Preventative

• Detective

• Corrective

• Physical

An organization implements a backup strategy to ensure data recovery in the event of a system failure. What type of control is this?

• Preventative

• Detective

• Corrective

• Compensating

Due to a critical system vulnerability, an organization decides to temporarily shut down the affected service until the issue is patched. What type of control is being applied?

• Preventative

• Detective

• Corrective

• Deterrent

A security team is investigating a potential security incident in which an unauthorized user gained access to sensitive files. What type of control could aid in identifying such incidents?

• Preventative

• Detective

• Corrective

• Deterrent

A company, in compliance with regulatory requirements, conducts regular security training for employees to increase awareness and knowledge. What type of control is represented by this training?

• Preventative

• Detective

• Corrective

• Compensating