SSCP · Question #943
Which of the following is NOT a compensating measure for access violations?
The correct answer is D. Security awareness. Security awareness training is NOT a compensating measure - it is a preventive control. Its purpose is to educate users so that access violations do not occur in the first place. Compensating measures are reactive controls that reduce the impact of or provide recovery from a…
Question
Options
- ABackups
- BBusiness continuity planning
- CInsurance
- DSecurity awareness
How the community answered
(35 responses)- B3% (1)
- C3% (1)
- D94% (33)
Explanation
Security awareness training is NOT a compensating measure - it is a preventive control. Its purpose is to educate users so that access violations do not occur in the first place. Compensating measures are reactive controls that reduce the impact of or provide recovery from a violation after it happens. Backups (A) allow data restoration if data is destroyed or corrupted during a violation. Business continuity planning (B) helps maintain operations in the aftermath. Insurance (C) provides financial compensation for losses resulting from a violation. Security awareness (D) acts before the violation, making it preventive, not compensating.
Topics
Community Discussion
No community discussion yet for this question.