Exam objective

SY0-701 1.1: Security Controls

Security+ Topic

Security Controls for Security+

This Security+ topic covers control categories: technical, managerial, operational, and physical; Control types: preventive, deterrent, detective, corrective, compensating, and directive; The distinction between what form a security control takes and what purpose it serves; Short scenarios that ask for the best category, best type, or both.

Start first lesson

3 lessons in this topic

1

Security Control Categories

Classify controls as technical, managerial, operational, or physical based on what kind of risk response they represent.

2

Security Control Types

Differentiate preventive, deterrent, detective, corrective, compensating, and directive controls by their purpose in a scenario.

3

Control Intent Matching

Given a simple risk or failure scenario, choose the control category and type that best matches the intended security outcome.

Common mistakes to avoid

1

Learners often confuse category with purpose. "Technical" does not automatically mean preventive, and "managerial" does not automatically mean directive. Category describes the form of the control; type describes what the control is intended to do.

2

Deterrent and preventive controls are often mixed up. A preventive control blocks the action; a deterrent control discourages the attempt. Detective and corrective controls are also commonly confused.

3

The most common mistake is answering with a familiar control name instead of classifying the scenario. Another common mistake is treating examples as fixed labels.