CompTIA Security+ (SY0-601) — Question 638

A security manager is implementing MFA and patch management. Which of the following would best describe the control type and category? (Choose two.)

Answer options

• A. Physical
• B. Managerial
• C. Detective
• D. Administrative
• E. Preventative
• F. Technical

Correct answer: E, F

Explanation

The correct answers are E (Preventative) and F (Technical) because Multi-Factor Authentication and patch management are both proactive measures that aim to prevent security incidents. The other options, such as Physical and Administrative, do not accurately reflect the nature of these specific controls.