II0-001 · Question #220
The following are detective controls for a malicious attack except:
The correct answer is C. Electronic Frontier Firewall. Option C is correct because a firewall - regardless of the branding name attached - is a preventive control, not a detective one. It stops unauthorized traffic from entering the network before an attack occurs rather than identifying or alerting on attacks that are underway…
Question
The following are detective controls for a malicious attack except:
Options
- ANetwork Intrusion Detection
- BCCTV
- CElectronic Frontier Firewall
- DTripwire
How the community answered
(32 responses)- A3% (1)
- B6% (2)
- C78% (25)
- D13% (4)
Explanation
Option C is correct because a firewall - regardless of the branding name attached - is a preventive control, not a detective one. It stops unauthorized traffic from entering the network before an attack occurs rather than identifying or alerting on attacks that are underway.
The distractors are all genuine detective controls: Network Intrusion Detection (A) monitors traffic and alerts on suspicious patterns in real time; CCTV (B) records physical activity and enables after-the-fact review or live monitoring of unauthorized access; Tripwire (D) detects unauthorized changes to files or system configurations, signaling a possible breach.
Memory tip: Detective controls discover - they watch, log, and alert. If a control's primary job is to block something before it happens, it's preventive. When you see "firewall" in any form on an exam, think prevention, not detection.
Community Discussion
No community discussion yet for this question.