SSCP · Question #58
The control measures that are intended to reveal the violations of security policy using software and hardware are associated with:
The correct answer is B. Detective/technical. Detective controls identify and alert on security policy violations after - or as - they occur, rather than preventing them. When these controls use software and hardware to perform the detection (e.g., intrusion detection systems, security information and event management (SIEM)
Question
The control measures that are intended to reveal the violations of security policy using software and hardware are associated with:
Options
- APreventive/physical
- BDetective/technical
- CDetective/physical
- DDetective/administrative
How the community answered
(40 responses)- A5% (2)
- B90% (36)
- C3% (1)
- D3% (1)
Explanation
Detective controls identify and alert on security policy violations after - or as - they occur, rather than preventing them. When these controls use software and hardware to perform the detection (e.g., intrusion detection systems, security information and event management (SIEM) tools, audit logs, antivirus scanning), they form the Detective/Technical pairing. The key distinction from Preventive/Technical is the intent: preventive controls stop violations, while detective controls reveal or record them. Physical detective controls (like cameras) require human review, while technical detective controls are automated through software/hardware.
Topics
Community Discussion
No community discussion yet for this question.