SY0-501 · Question #351
Which of the following is the BEST choice for a security control that represents a preventive and corrective logical control at the same time?
The correct answer is B. Antivirus. Antivirus software is the best choice because it acts as a preventive logical control by blocking malware and a corrective logical control by removing existing infections.
Question
Which of the following is the BEST choice for a security control that represents a preventive and corrective logical control at the same time?
Options
- ASecurity awareness training
- BAntivirus
- CFirewalls
- DIntrusion detection system
How the community answered
(49 responses)- A8% (4)
- B71% (35)
- C16% (8)
- D4% (2)
Why each option
Antivirus software is the best choice because it acts as a preventive logical control by blocking malware and a corrective logical control by removing existing infections.
Security awareness training is a preventive administrative control that educates users, but it does not technically correct or remediate a security incident on a system.
Antivirus software serves as a preventive logical control by employing real-time protection and signature-based scanning to stop malware from initially infecting a system. Concurrently, it functions as a corrective logical control by detecting, quarantining, and removing malicious software that has already breached defenses, thereby remediating the system post-infection.
Firewalls are primarily preventive logical controls that block unauthorized network traffic, but they do not actively clean or remove malware from an infected system.
An Intrusion Detection System (IDS) is a detective logical control that identifies and alerts on suspicious activity, but it does not actively prevent intrusions or correct system infections itself.
Concept tested: Preventive and corrective logical security controls
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-in-windows-10?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.