TechKnowSurge
CompTIA Security+ 1.1 ISC2 CISSP 1.2
TechKnowSurge Catalog Interactives What Does This Control Do?
InteractiveSecurityFree

What Does This Control Do?

Stop it, discourage it, spot it, fix it, cover for a gap, or tell people what to do? Sort each control by its job.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

A control can be described by its type, the job it does. Security+ (SY0-701) uses six types: Preventive: stops the event from happening at all. A firewall rule that denies a connection, a door that opens only for an authorized badge, multi-factor authentication. Deterrent: does not stop the event but discourages it, so an attacker decides it is not worth it. A login banner warning that misuse will be prosecuted, a sign warning that intruders will be reported. Detective: notices that something happened or is happening. An intrusion detection system, reviewing logs, file integrity monitoring. Corrective: acts once something is happening or has happened, to stop it or fix what it broke. Quarantining an infected laptop, patching the flaw an attacker used, resetting a stolen password. Compensating: an alternative put in place when the main control cannot be used, giving similar protection a different way. Isolating a server that cannot be patched. Directive: tells people what they are required to do, in a policy or procedure, and relies on them doing it. A policy telling staff to lock their screens is directive; a setting that locks the screen for them is preventive. The lesson also describes recovery controls, such as restoring from backup. Security+ groups recovery with corrective, so no card here asks you to split the two. Many controls do more than one job; each card describes the job this one is doing.

What you'll learn

Aligned to

CompTIA Security+
1.1 Compare and contrast various types of security controls.
ISC2 CISSP
1.2 Understand and apply security concepts

Key terms

Preventative Control
A security control designed to stop a threat or incident from occurring in the first place. Firewalls, encryption, and access control policies are common examples of preventative controls.
Deterrent Control
A security control that discourages threat actors from attempting an attack by making the environment appear more difficult or risky to compromise. Warning banners, visible cameras, and security signage are common deterrent controls.
Detective Control
A security control that identifies and alerts on security incidents or anomalous activity as they occur or after the fact. Intrusion detection systems, security logs, and audit trails are examples of detective controls.
Corrective Control
A security control that addresses and remediates a security incident after it has been identified — such as restoring systems from backup, patching a exploited vulnerability, or blocking an attacker's IP address.
Compensating Control
An alternative security measure implemented to offset a known risk or vulnerability when a primary control cannot be fully applied. A compensating control must provide an equivalent or greater level of protection.

Topics

Security Control Control Types Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →