Network Defense Essentials (NDE) Practice Exam

Which type of control serves as an alternative when intended controls fail?

1. Deterrent controls

2. Compensating controls

3. Preventive controls

4. Detective controls

The correct answer is: Compensating controls

Compensating controls play a vital role in a security framework by providing alternative methods to mitigate risks when the intended or primary controls do not function as planned. These controls are essentially backups or substitutes that are implemented to ensure that the organization's security posture remains effective even in the face of control failures. For instance, if a primary security measure, such as a firewall, fails or is breached, a compensating control might include additional layers of security like network segmentation, increased monitoring, or alternative access controls that help protect critical assets. The use of compensating controls acknowledges that while no security measure can be flawless, having a robust plan for substitutive measures enhances the overall defense of the system. This concept is particularly important in risk management and security planning, as it emphasizes the need for resilience and flexibility in security strategies, ensuring that organizations can continue to safeguard their assets even when facing unexpected challenges.