What is an example of corrective control?

Question

Options

• ADeploying role-based access control to manage permissions
• BRunning an antivirus program after denial of service
• CSetting up user accounts and passwords to control unauthorized access
• DEncrypting the data in-flight and data-at-rest

• A
  10% (4)
• B
  82% (32)
• C
  5% (2)
• D
  3% (1)

Explanation

Security Controls: Classification Based on the roles they play, controls are categorized as preventive, detective, and corrective. The preventive control attempts to prevent an attack; the detective control detects whether an attack is in progress; and after an attack is discovered, the corrective controls are implemented. Preventive controls avert the vulnerabilities from being exploited and prevent an attack or reduce its impact. Corrective controls reduce the effect of an attack, whereas detective controls discover attacks and trigger preventive or corrective controls. For example, an Intrusion ejection/Intrusion Prevention System (IDS/IPS) is a detective control that determines whether an attack is underway and then attempts to stop it by terminating a network connection or invoking a firewall rule to block traffic.

No community discussion yet for this question.