Objective 1.1: Compare and contrast various types of security controls
Security+ SY0-701 practice question
A security analyst at a regional credit union is documenting existing controls before an external audit. Sort each control into the control type that BEST describes its primary purpose. A control type can be used more than once, and some control types might not be used.
Interactive question — try it in the free practice test
Explanation
Control types describe what a control is meant to do. Preventive controls stop an event before it happens, deterrent controls discourage an attacker from trying, detective controls identify an event during or after it occurs, corrective controls restore normal operation after an event, compensating controls are alternatives used when the primary control cannot be implemented, and directive controls tell people what they must or must not do. Ask what the control does in the scenario, not what technology it uses.