Discuss Exin CITM Exam Topic 8 Question 5

A technical team investigating possible controls concludes that the most preferred control cannot be implemented as a result of too many constraints and decides to propose the second-best control. How is this control being referred to?

ADeterrent

BCompensating control

CDetective control

DCorrective control

Suggested Answer: B

A compensating control is an alternative control implemented when the preferred control cannot be applied due to constraints (e.g., technical, financial, or operational). According to frameworks like COBIT or ISO/IEC 27001, compensating controls provide equivalent or partial risk mitigation when the primary control is infeasible.

Deterrent controls (A) discourage violations, detective controls (C) identify incidents, and corrective controls (D) address issues after they occur. Only compensating control (B) fits the scenario of a second-best alternative due to constraints.

Get Premium CITM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

27 comments · newest first

Glendora 10 months ago

Sounds a bit off, I’m not convinced it’s compensating.

Margret 10 months ago

Wait, are we sure it's not corrective?

Amber 10 months ago

Totally agree, compensating is the right term here.

Jame 10 months ago

I thought it was a detective control?

Bronwyn 10 months ago

It's definitely a compensating control!

Lajuana 11 months ago

If the preferred control can't be implemented, it makes sense to go with a compensating control, but I hope that's the correct answer!

Meghann 11 months ago

I'm a bit confused; I thought detective controls were more about identifying issues after they happen, not proposing alternatives.

Matt 12 months ago

I remember practicing a question about controls, and I think the second-best option is often referred to as a compensating control.

Yaeko 12 months ago

I think the term we're looking for is "compensating control," but I'm not entirely sure if that's the right choice.

Ruth 12 months ago

The key here is that the team couldn't implement the preferred control due to constraints, so they had to go with the second-best option. That sounds like a compensating control to me.

Krissy 1 year ago

I'm a little confused by the wording of this question. I'll need to re-read it a few times to make sure I understand what they're asking.

Lilli 1 year ago

Okay, let's see. If the team couldn't implement the preferred control, then the second-best option must be a compensating control. I think that's the answer.

Asha 1 year ago

Hmm, I'm a bit unsure about the difference between the control types here. I'll need to think this through carefully.

Daron 1 year ago

This seems like a straightforward question about control types. I'm pretty confident I can figure this out.

Shanice 1 year ago

Actually, I believe the correct answer is B) Compensating control because it helps to mitigate the risks when the preferred control cannot be implemented.

Dana 1 year ago

B) Compensating control - It's the control that says, 'Hey, we couldn't do the best thing, but we're doing the next best thing.'

Elin 1 year ago

Hah, I bet the team is wishing they had a 'magical control' option instead of these boring choices.

Mammie 9 months ago

↳ replying to Elin

True, but it still feels like a letdown.

Carma 10 months ago

↳ replying to Elin

Seriously! But I guess compensating control is the next best thing.

Dell 11 months ago

↳ replying to Elin

Haha, right? A magical control would solve everything!

Annelle 11 months ago

↳ replying to Elin

At least they have options to work with!

Mel 1 year ago

I'm not sure, but I think it might be C) Detective control.

Nan 1 year ago

D) Corrective control? Nah, that's not it. Gotta be B, the compensating control.

Jamal 1 year ago

B) Compensating control - Makes sense, since the team couldn't implement the preferred control due to constraints.

Elouise 1 year ago

↳ replying to Jamal

A) Deterrent

Clay 1 year ago

I agree with Tina, the second-best control is usually a compensating control.

Tina 1 year ago

I think the answer is B) Compensating control.

Exin CITM Exam - Topic 8 Question 5 Discussion