(ISC)2
SSCP · Question #255
Which of the following is a not a preventative control?
The correct answer is C. Run a source comparison program between control and current source periodically. Running the source comparison program between control and current source periodically allows detection, not prevention, of unauthorized changes in the production environment. Other options are preventive controls.
Submitted by devops_kid· Apr 18, 2026Security Concepts and Practices
Question
Which of the following is a not a preventative control?
Options
- ADeny programmer access to production data.
- BRequire change requests to include information about dates, descriptions, cost analysis and
- CRun a source comparison program between control and current source periodically.
- DEstablish procedures for emergency changes.
How the community answered
(53 responses)- A6% (3)
- B2% (1)
- C91% (48)
- D2% (1)
Explanation
Running the source comparison program between control and current source periodically allows detection, not prevention, of unauthorized changes in the production environment. Other options are preventive controls.
Topics
#Security Controls#Preventative Controls#Detective Controls#Control Types
Community Discussion
No community discussion yet for this question.