Which of the following is an example of a deterrent control?

The correct answer is D. A warning banner. A deterrent control discourages threat actors from attempting an attack by signaling that unauthorized actions will be detected and prosecuted. A warning banner (D) is the classic example - it notifies users that activity is monitored and that unauthorized access is subject to…

Submitted by javi_es· Apr 18, 2026Information Security Risk Management

Question

Options

AAn intrusion detection system (IDS)
BPeriodic data restoration
CSeparation of responsibilities
DA warning banner

How the community answered

(33 responses)

B
3% (1)
C
3% (1)
D
94% (31)

Explanation

A deterrent control discourages threat actors from attempting an attack by signaling that unauthorized actions will be detected and prosecuted. A warning banner (D) is the classic example - it notifies users that activity is monitored and that unauthorized access is subject to legal consequences, thereby discouraging malicious behavior before it occurs. An IDS (A) is a detective control - it identifies attacks already underway but does not prevent or deter them. Periodic data restoration (B) is a corrective/recovery control used after an incident. Separation of responsibilities (C) is a preventive control that limits what any single individual can do, but it does not deter by warning.

Topics

#Security Controls#Deterrent Controls#Control Types#Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full CISM Practice