CompTIA Security+ (SY0-601) — Question 609

A company has implemented a policy that requires two people to agree in order to push any changes from the test codebase repository into production. Which of the following best describes this control type?

Answer options

• A. Detective
• B. Technical
• C. Physical
• D. Operational

Correct answer: D

Explanation

The correct answer is D, as this scenario describes an operational control that involves procedures and policies to ensure security and compliance. Options A and B refer to types of controls that do not involve direct human oversight, while option C focuses on physical security measures, which is not applicable in this context.