ISFS · Question #40
Midwest Insurance controls access to its offices with a passkey system. We call this a preventive measure. What are some other measures?
The correct answer is A. Detective, repressive and corrective measures. Option A is correct because security controls are classically divided into four categories: preventive (stop incidents before they occur), detective (identify incidents as they happen, e.g., security cameras or audit logs), repressive (limit the damage once an incident is…
Question
Midwest Insurance controls access to its offices with a passkey system. We call this a preventive measure. What are some other measures?
Options
- ADetective, repressive and corrective measures
- BPartial, adaptive and corrective measures
- CRepressive, adaptive and corrective measures
How the community answered
(25 responses)- A72% (18)
- B12% (3)
- C16% (4)
Explanation
Option A is correct because security controls are classically divided into four categories: preventive (stop incidents before they occur), detective (identify incidents as they happen, e.g., security cameras or audit logs), repressive (limit the damage once an incident is underway, e.g., locking down systems), and corrective (restore normal operations after the fact, e.g., restoring backups). These four work together as a complete cycle.
Option B is wrong because "partial" and "adaptive" are not recognized standard security measure types - they describe qualities of controls, not distinct control categories.
Option C is wrong for the same reason: "adaptive" has no standing in the standard four-category framework, making this list incomplete and incorrect.
Memory tip: Use the acronym PDRC - Prevent, Detect, Repress, Correct - like a security lifecycle. The passkey prevents entry, so the remaining three (D, R, C) are what Option A lists.
Topics
Community Discussion
No community discussion yet for this question.