An algorithm in an email program analyzes traffic to quarantine emails identified as spam. The algorithm in the program is BEST characterized as which type of control?

A detective control identifies an event after it has occurred (e.g., an intrusion detection system alerting to a breach), whereas quarantining stops the event from fully materializing.

A directive control provides guidance or instructions (e.g., a policy), but an algorithm actively enforcing a rule is a more direct form of control.

A preventive control is designed to stop an undesirable event from happening in the first place. By analyzing email traffic and quarantining emails identified as spam before they reach the user's inbox, the algorithm actively prevents the potential negative consequences of spam, such as phishing, malware infection, or productivity loss, thereby acting as a preventive measure.

A corrective control remedies an event after it has occurred (e.g., restoring data after a loss), whereas quarantining prevents the need for correction by stopping the threat upfront.