A security analyst finds an application that cannot enforce the organization's password policy. An exception is granted. As a compensating control, all users must confirm that their passwords comply…

The correct answer is B. Managerial. A managerial control involves policies, procedures, or administrative actions designed to manage and enforce compliance with security requirements. In this case, requiring users to confirm that their passwords comply with the organization's policy is an administrative measure…

Submitted by priya_blr· Mar 6, 2026Security operations

Question

A security analyst finds an application that cannot enforce the organization's password policy. An exception is granted. As a compensating control, all users must confirm that their passwords comply with the organization's policy. Which of the following types of compensating controls is the organization using?

Options

ACorrective
BManagerial
CTechnical
DDetective

How the community answered

(38 responses)

A
5% (2)
B
74% (28)
C
3% (1)
D
18% (7)

Explanation

A managerial control involves policies, procedures, or administrative actions designed to manage and enforce compliance with security requirements. In this case, requiring users to confirm that their passwords comply with the organization's policy is an administrative measure implemented to compensate for the application's inability to enforce the password policy. This falls under the category of managerial controls.

Topics

#Compensating controls#Managerial controls#Password policy#Security controls

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice