What is a 'preventive' security control?
- A.A control that detects attacks after they occur
- B.A control designed to stop a security incident before it happens
- C.A control that recovers systems after an incident
- D.A control that documents security policies
Why B is correct
Preventive controls are designed to stop security incidents before they occur. Examples include firewalls (blocking unauthorized traffic), access controls (preventing unauthorized access), encryption (preventing data exposure), and security awareness training (preventing human errors). They are the first line of defense.
Know someone studying for Security Fundamentals? Send them this one.