Exam SY0-701 topic 1 question 240 discussion

EF Technical controls involve the use of technology to manage or mitigate risks. By segmenting the server into VALN and restricting access to specific devices, the network team has employed a technical control here. Compensating controls are alternative measures in place to address a risk when the primary control is not feasible which in these case segmenting the server into VLAN and limiting access can be seen as compensating control.

The network team implemented two types of controls: Physical: Segmenting the server to a VLAN is a physical control, as it restricts network access to the server. Technical: Limiting access to the VLAN only to specific devices is a technical control, as it involves configuring network devices to enforce access rules. The other options are not applicable

E. Compensating and F. Technical. Compensating: The segmentation serves as a compensating control, mitigating the risk associated with using an end-of-life server by isolating it from the perimeter network. Technical: The VLAN configuration is a technical control, implementing a network-based security measure to restrict access to the critical server. The other options are not applicable in this scenario: Managerial: Managerial controls are policies, procedures, and guidelines established by management. Physical: Physical controls are physical barriers or safeguards, such as locks, fences, or security guards. Corrective: Corrective controls are implemented to address a security incident or vulnerability after it has occurred. Detective: Detective controls are designed to detect security incidents or vulnerabilities. Deterrent: Deterrent controls are designed to discourage unauthorized access or malicious activity.

E. Compensating and F. Technical (aka technological)