Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

Question

Options

• ANetwork based security preventative controls
• BSoftware segmentation controls
• CNetwork based security detective controls
• DUser segmentation controls

• A
  80% (35)
• B
  7% (3)
• C
  11% (5)
• D
  2% (1)

Explanation

ACLs, Firewalls, and IPSs are preventative controls because they actively block or filter threats before they cause harm - they don't just observe or report. This makes A correct: all three operate at the network layer and are designed to stop unauthorized access or malicious traffic from occurring in the first place.

Why the distractors are wrong:

• B (Software segmentation controls) - segmentation refers to dividing systems/networks into isolated zones; ACLs/firewalls do enforce boundaries, but their primary classification is security control type, not segmentation method.
• C (Network-based security detective controls) - detective controls identify threats after or during the fact (e.g., IDS, SIEM, log monitoring). IPS is often confused with IDS - the key difference is that IPS prevents (blocks), while IDS only detects (alerts).
• D (User segmentation controls) - this isn't a standard security control category; it conflates access segmentation concepts with user-specific permissions, which is a different domain.

Memory tip: Think P-D-C (Prevent → Detect → Correct). Firewalls and ACLs are gatekeepers (prevent). If you can recall that IPS = "Prevention System" vs. IDS = "Detection System," you'll never confuse options A and C again.

No community discussion yet for this question.