Exam SY0-601 topic 1 question 653 discussion

Actual exam question from CompTIA's SY0-601

Question #: 653
Topic #: 1

A recent audit uncovered a key finding regarding the use of a specific encryption standard in a web application that is used to communicate with business customers. Due to the technical limitations of its customers, the company is unable to upgrade the encryption standard. Which of the following types of controls should be used to reduce the risk created by this scenario?

A. Physical
B. Detective
C. Preventive
D. Compensating

Show Suggested Answer

Suggested Answer: D 🗳️

by sujon_london at Sept. 7, 2023, 7:11 p.m.

Comments

Submit Cancel

sujon_london

Highly Voted 1 year, 9 months ago

Selected Answer: D

To reduce the risk created by this situation, compensating controls should be used. Compensating controls are alternative measures that can be put in place when a primary control is not feasible or effective. These controls are designed to compensate for the lack of a primary control and reduce the risk to an acceptable level. In this case, the company could implement compensating controls such as increasing the frequency of security audits, implementing intrusion detection systems, and restricting access to sensitive data.

upvoted 11 times

...

Malkhofash

Highly Voted 1 year, 6 months ago

Compensating controls are alternative solution for a problem

upvoted 5 times

...

subaie503

Most Recent 1 year, 4 months ago

"unable to upgrade" "legacy" -> compensate

upvoted 5 times

...