Study. uk . com
  1. Home
  2. All questions
  3. Question 200

CompTIA Security+ study material · question 200 of 611

A required control cannot be implemented on a legacy platform, so an alternative providing comparable protection is deployed and documented. What is this?

  1. A common control
  2. A compensating control
  3. A control enhancement
  4. A corrective control
Show the answer

Answer: B. A compensating control

A compensating control substitutes for one that cannot be implemented, and must be documented as a deliberate substitution.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › Control Baselines and Tailoring

Challenge yourself on this topic → Study as cards