Questão 78 — CompTIA SY0-701 CompTIA Security+ Certification Exam
Which of the following best explains the role of compensating controls?
- A. Reducing the attack surface by isolating vulnerable components within a segmented environment
- B. Providing an alternative security measure when standard remediation is not feasible
- C. Delaying remediation timelines by replacing affected systems in a maintenance window
- D. Remediating software flaws by modifying source code to remove insecure functions
Resposta correta:
B
Explicação
Explanation: Correct answer: B. Providing an alternative security measure when standard remediation is not feasible The best answer is B. Providing an alternative security measure when standard remediation is not feasible. A compensating control is a substitute safeguard used when the preferred or required control cannot be implemented immediately or at all. It helps reduce risk in another way until proper remediation is possible, or when direct remediation is impractical. Examples include: increasing monitoring when a system cannot be patched segmenting a legacy application that cannot be upgraded restricting access to a vulnerable system that must remain in service
Quer todas as 907 questões por R$ 1,00?