You are the owner of the courier company SpeeDelivery. On the basis of your risk analysis you have decided to take a number of measures. You have daily backups made of the server, keep the server…

Question

Options

• ABackup tape
• BIntrusion alarm
• CSprinkler installation
• DAccess restriction to special rooms

• A
  6% (2)
• B
  71% (24)
• C
  9% (3)
• D
  15% (5)

Explanation

Option B is correct because an intrusion alarm detects a security breach as it happens and triggers an alert - it doesn't stop the intrusion from starting, nor does it repair damage afterward. That detection role is the defining characteristic of a detective control.

Why the others are wrong:

• A (Backup tape) is a corrective measure - it restores data after an incident has already occurred, not during or before.
• C (Sprinkler installation) is also corrective (sometimes called "repressive") - it suppresses fire damage in progress but does not identify or report a threat.
• D (Access restriction / locked room) is a preventive measure - it blocks unauthorized access before any incident can occur.

Memory tip: Think of the three control types as a timeline - Preventive stops it before, Detective spots it during, Corrective fixes it after. An alarm rings while something is happening, so it's always Detective.

No community discussion yet for this question.