Which controls apply to VLAN segmentation of an end-of-life server?

A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but cannot be reached by the perimeter network. Which of the following best describe the controls the team implemented? (Choose two.)

  1. Managerial
  2. Physical
  3. Corrective
  4. Detective
  5. Compensating Source Reference Answer

Community Insight

The exam tests your ability to identify both the control mechanism (technical) and the reason it is used (compensating) when a primary control cannot be implemented.

CompTIA SY0-701 asks about the controls used when isolating an end-of-life server via a VLAN. The community agrees that both compensating and technical controls are correct, not just compensating alone.

Choosing only E (Compensating) or mistaking the VLAN for a physical control is common; many candidates overlook that Technical is the other correct answer because VLAN configuration is a technology-based control.

Community Discussion (4 comments)

a4e15bd 👍 6
EF Technical controls involve the use of technology to manage or mitigate risks. By segmenting the server into VALN and restricting access to specific devices, the network team has employed a technical control here. Compensating controls are alternative measures in place to address a risk when the primary control is not feasible which in these case segmenting the server into VLAN and limiting access can be seen as compensating control.
ProudFather 👍 1 Selected: B
The network team implemented two types of controls: Physical: Segmenting the server to a VLAN is a physical control, as it restricts network access to the server. Technical: Limiting access to the VLAN only to specific devices is a technical control, as it involves configuring network devices to enforce access rules. The other options are not applicable
Glacier88 👍 3 Selected: E
E. Compensating and F. Technical. Compensating: The segmentation serves as a compensating control, mitigating the risk associated with using an end-of-life server by isolating it from the perimeter network. Technical: The VLAN configuration is a technical control, implementing a network-based security measure to restrict access to the critical server. The other options are not applicable in this scenario: Managerial: Managerial controls are policies, procedures, and guidelines established by management. Physical: Physical controls are physical barriers or safeguards, such as locks, fences, or security guards. Corrective: Corrective controls are implemented to address a security incident or vulnerability after it has occurred. Detective: Detective controls are designed to detect security incidents or vulnerabilities. Deterrent: Deterrent controls are designed to discourage unauthorized access or malicious activity.
b82faaf 👍 3 Selected: E
E. Compensating and F. Technical (aka technological)

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Both E (Compensating) and F (Technical) are correct. The VLAN segmentation is a technical control because it uses networking technology—VLANs and access rules—to restrict communication. It is also a compensating control because the server is end-of-life and cannot be patched; the segmentation provides an alternative control to mitigate the risk of exposure. Comment [2] explicitly identifies both: "The segmentation serves as a compensating control... The VLAN configuration is a technical control." Comment [1] also supports this reasoning.

Why the Other Options Are Wrong

Managerial controls (A) are policies and procedures, not network configurations. Physical controls (B) involve tangible barriers like locks or fences, not VLANs. Corrective controls (C) are designed to repair damage after an incident, while detective controls (D) identify ongoing or past incidents—neither applies to proactive network segmentation. No comment suggests these options, and they do not fit the scenario.

Community Comment Notes

The most useful comments agree on E and F. Comment [2] provides a clear breakdown: compensating control mitigates the end-of-life risk and technical control covers the VLAN implementation. Comment [3] simply states "E. Compensating and F. Technical (aka technological)." The suggested answer E is incomplete—it omits the technical aspect, which is a key trap in choose-two questions.

Official Reference

Exam Strategy

For 'choose two' control-type questions, classify the control by both mechanism (managerial, operational, physical, technical) and purpose (preventive, detective, corrective, compensating). Here the mechanism is technical and the purpose is compensating, since the end-of-life server requires an alternate control because patching is not possible.

Related Analysis

Which of the following security measures is required when us

A-Grade

A security engineer is installing an IPS to block signature-

A-Grade

A systems administrator receives the following alert from a

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide