Free CompTIA CySA+ CS0-003 Practice Question

The correct answer is false. Implementing a compensating control is not always considered less secure than applying the original security control. The purpose of a compensating control is to provide an alternative measure of protection when an organization cannot implement the preferred security control due to various constraints. While compensating controls may not always offer the same level of protection, they are designed to alleviate risk adequately when deployed correctly. In some scenarios, they can be equally effective or even more so, depending on the context and how they are implemented.