Security+ control types: function and implementation
One control can be described along more than one dimension. A firewall rule is technical in implementation and may be preventive in function. A warning sign is physical but primarily deterrent when its purpose is to discourage attempts. Read what the scenario asks before selecting a category. Detection, prevention, correction, and deterrence are different intended outcomes rather than mutually exclusive descriptions of entire products.
How to read the scenario
Choose the role demonstrated by the scenario, not every capability the product might have in another deployment.
Identify the required outcome, the evidence already provided, and the limits on the technician’s action. Compare every option against those details before deciding. Record why the closest alternative does not meet the stated need.
Original practice example
A firewall blocks unauthorized connections before they reach a protected application. Which functional control category best describes this action?
- Detective control
- Preventive control
- Corrective control
- Deterrent control
Show the answer and explanation
Preventive control
Preventive controls aim to stop an unwanted event from occurring.
Study questions
Which objective does this guide support?
SY0-701, objective 1.1. This independent guide supports original practice and does not replace the full official objectives.
What should I watch for in a scenario?
Choose the role demonstrated by the scenario, not every capability the product might have in another deployment.
Source and version
CompTIA official SY0-701 objectives, objective 1.1. Verified November 5, 2026. This guide targets SY0-701. SY0-801 is expected around November 17, 2026 and is outside this edition.