Exam SY0-601 topic 1 question 92 discussion

a piece of paper with a crayon that says 'STAY OUT OF HERE" is the cheapest method if you ask me

This is a confusing one - > Without thinking too much, deterrent controls seems to be less expensive I hear you ....

RESTRICTED AREA

A compensatory control will always be cheaper, no matter how cheap any other control, such as a deterrent, may be. For example, and using the banditring example, a piece of paper with a crayon that says "STAY OUT OF HERE" seems to be pretty cheap. But if for some reason you can't afford to use that control, perhaps and being very extreme let's imagine that the paper or crayons to make the poster are something you can't afford, then you have no other way than to use a compensating control for it. Even if that doesn't make sense in real life, since this is a very extreme example, the idea is that whenever you can't afford to use the control you need or want, you should look for a compensating control.

Preventive seems correct to me it will put physical barriers in place to limit access.

Detective controls: These controls identify and respond to incidents after they occur. They include security monitoring, alarms, and incident reporting. Detective controls can be implemented with minimal upfront costs, making them ideal for a tight budge

DDetective controls: These controls identify and respond to incidents after they occur. They include security monitoring, alarms, and incident reporting. Detective controls can be implemented with minimal upfront costs, making them ideal for a tight budge

such a broad question, any answer can be correct here imo, hate when they give us these kinds of questions

This is definitely C. A is too expensive, key word is cheapest. C you can do with a warning sign saying "do not enter, cameras in use' and it would deter most people.

I think everybody is focusing on the "Technical control" which has Deterrent control, but the question is asking about "Physical Control" : -Preventive controls are making the location less tempting to break into; such as secure entry points, biometric or card-based access systems, and employee identification. -Detective controls is identifying what was broken into, what is missing, and the extent of the damage. Alarms, Cameras, guards -Recovery controls are the review of the physical security procedures, repairing any damage, and hardening the physical security of the company against future problems. So from the "Physical Control " is A: Preventative Control makes more sense for me

Asked Chatgpt, it said B. Compensating controls, which was obviously incorrect. After some prodding it changed its answer to A. Preventive controls which I believe is correct.

Deterrent Control is the right one for me

Detective controls (option D) focus on identifying security incidents after they occur and may not discourage unauthorized access.

Deterrent controls are measures designed to discourage potential attackers or unauthorized individuals from attempting to gain access to a physical site. These controls are often cost-effective and can be a more budget-friendly option compared to other control types. Examples of deterrent controls include visible security cameras, warning signs, access control badges, security guards, and physical barriers like fences or gates. While deterrent controls may not physically prevent access, their presence can deter or discourage unauthorized individuals from attempting to breach the site.

Deterrent controls are designed to discourage potential intruders or unauthorized individuals from attempting to gain access to a physical site. They focus on creating a perception of risk or increasing the effort required for unauthorized access. Deterrent controls are typically cost-effective and can be effective in preventing or reducing security incidents.

God, who wrote these kinds of questions?

Its impossible to say if deterrent or preventative controls would be cheaper. If a site has a single door, it may be cheaper to put a lock on, than to post signs. However the question said the control must LIMIT unauthorized access. Limit in this context is synonymous with restrict. While deterrents may reduce incidents of unauthorized access... they do nothing to actually limit/restrict it.