Question 80
Main Page
A key control cannot be implemented due to cost. What must be true for a compensating control to be acceptable?
A. It must reduce the number of users
B. It must offer equivalent protection
C. It must save operational effort
D. It must be cheaper than the original
Answer: B. It must offer equivalent protection
Compensating controls are only effective if they meet the intent and security objectives of the control they replace.