CompTIA CySA+ Practice Test

What category do firewalls and intrusion detection systems fall under?

1. Administrative controls

2. Technical controls

3. Physical controls

4. Compensating controls

The correct answer is: Technical controls

Firewalls and intrusion detection systems are classified as technical controls because they are implemented through technological means to protect information systems and networks. Technical controls are designed to mitigate risks and secure IT environments by using software or hardware solutions that monitor, prevent, or respond to security threats. For example, firewalls act as barriers that limit incoming and outgoing network traffic based on predetermined security rules, while intrusion detection systems monitor network or system activities for malicious activities or policy violations. Both are essential tools for enforcing security policies and safeguarding sensitive data without manual intervention. In contrast, administrative controls refer to management policies and procedures designed to ensure the security of data and systems. Physical controls involve securing the physical environment to prevent unauthorized access, such as locks or barriers. Compensating controls are alternative measures put in place to satisfy a security requirement when the primary control is not feasible. Thus, technical controls like firewalls and intrusion detection systems are crucial for operational security in a digital landscape.