Which of the following measures is a corrective measure?

Question

Options

• AIncorporating an Intrusion Detection System (IDS) in the design of a computer centre
• BInstalling a virus scanner in an information system
• CMaking a backup of the data that has been created or altered that day
• DRestoring a backup of the correct database after a corrupt copy of the database was written over the original

• A
  13% (6)
• B
  9% (4)
• C
  4% (2)
• D
  74% (35)

Explanation

D is correct because restoring a backup after a corrupt database was written over the original is a corrective measure - it responds to damage that has already occurred and returns the system to a known good state. Corrective controls fix problems after an incident.

Why the distractors are wrong:

• A (IDS) is a detective measure - it identifies and alerts on intrusions in progress but does not prevent or fix them.
• B (virus scanner) is primarily a preventive measure - it blocks or removes malware before it can cause harm.
• C (making a backup) is a preventive measure - it creates the recovery option but does not itself correct anything; the correction only happens when that backup is restored (as in D).

Memory tip: Think of the three control types as a timeline - Preventive (before), Detective (during), Corrective (after). Backups are a classic trap: making a backup is preventive preparation, but restoring a backup is the corrective action. The moment something is being fixed or recovered, you're in corrective territory.

No community discussion yet for this question.