Which of the following is an example of a preventive control?

Question

Options

• APenetration testing
• BBackup and recovery procedures
• CSecurity incident response
• DIntrusion detection system

• A
  8% (2)
• B
  4% (1)
• D
  88% (22)

Explanation

Among the options, an Intrusion Detection System (IDS) (D) is the closest to a preventive control in this context, as it can detect and in many implementations trigger automated responses to block threats before harm occurs. Penetration testing (A) is an assessment/detective activity. Backup and recovery (B) is a corrective control that restores systems after an incident. Security incident response (C) is also a corrective control activated after an event. Note: In strict security frameworks, IDS is often classified as a detective control, while IPS (Intrusion Prevention System) is the truly preventive counterpart - but for this exam question, D is the best available answer.

No community discussion yet for this question.