CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is a 'preventive' security control?
- A.A control designed to stop a security incident before it happens
- B.A control that recovers systems after an incident, and a preventive control can never also be classified as a technical control
- C.A control that documents security policies
- D.A control that detects attacks after they occur, since a preventive control detects an incident after it has occurred while a detective control stops it happening, and corrective controls run only while an attack is in progress
Why A is correct
Preventive controls are designed to stop security incidents before they occur. Examples include firewalls (blocking unauthorized traffic), access controls (preventing unauthorized access), encryption (preventing data exposure), and security awareness training (preventing human errors). They are the first line of defense.
Know someone studying for Security Fundamentals? Send them this one.