CRISC · Question #556
An organization uses a biometric access control system for authentication and access to its server room. Which control type has been implemented?
The correct answer is C. Preventive. A biometric access control system is a preventive control because its primary function is to stop unauthorized access to a physical or logical asset before an incident occurs.
Question
An organization uses a biometric access control system for authentication and access to its server room. Which control type has been implemented?
Options
- ADetective
- BDeterrent
- CPreventive
- DCorrective
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C80% (20)
- D12% (3)
Why each option
A biometric access control system is a preventive control because its primary function is to stop unauthorized access to a physical or logical asset *before* an incident occurs.
A detective control identifies an event *after* it has occurred, such as an intrusion detection system, which is not the primary function of an access control system.
While a biometric system might have a deterrent effect, its fundamental purpose is to actively *prevent* unauthorized access, rather than merely discouraging it.
A biometric access control system is a preventive control because it actively blocks unauthorized individuals from gaining entry to the server room, thereby preventing security incidents from occurring.
A corrective control aims to fix or restore systems *after* a security incident has taken place, which is not the role of an access control mechanism.
Concept tested: Control types (preventive)
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/control-types
Topics
Community Discussion
No community discussion yet for this question.