CompTIA CySA+ (CS0-002) — Question 220

Which of the flowing is the best reason why organizations need operational security controls?

Answer options

• A. To supplement areas that other controls cannot address
• B. To limit physical access to areas that contain sensitive data
• C. To assess compliance automatically against a secure baseline
• D. To prevent disclosure by potential insider threats

Correct answer: A

Explanation

The correct answer is A because operational security controls provide additional layers of protection for vulnerabilities that other security measures may not cover. Options B, C, and D, while important aspects of security, do not capture the comprehensive role that operational security plays in addressing gaps left by other controls.