Password management falls into which control category?

The correct answer is C. Preventive. Preventive controls stop a security incident before it occurs. Password management (enforcing complexity, expiration, history, lockouts) prevents unauthorized users from gaining access in the first place. Detective controls identify incidents after they happen; compensating…

Submitted by fatema_kw· Apr 18, 2026Access Controls

Question

Options

ACompensating
BDetective
CPreventive
DTechnical

How the community answered

(39 responses)

A
8% (3)
B
3% (1)
C
87% (34)
D
3% (1)

Explanation

Preventive controls stop a security incident before it occurs. Password management (enforcing complexity, expiration, history, lockouts) prevents unauthorized users from gaining access in the first place. Detective controls identify incidents after they happen; compensating controls are alternatives when a primary control cannot be implemented; 'technical' is a control category type (not a functional category) that can include preventive, detective, or corrective controls.

Topics

#Password Management#Security Controls#Preventive Controls#Control Types

Community Discussion

No community discussion yet for this question.

Full SSCP Practice