To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are…

Corrective controls are applied after an incident has occurred to minimize its impact and restore the system to a secure state, not to prevent the initial incident.

Adaptive controls adjust their behavior based on changing conditions or threats, but 'adaptive' is not a standard classification based on the timing of an incident's prevention.

Detective controls are designed to identify and alert when an incident is occurring or has already occurred, rather than proactively preventing it.

Preventive controls are deployed to actively block or hinder unauthorized actions and potential security incidents, thereby stopping them before they can manifest within a system or environment by enforcing security policies.