In 2007,a major U.S.financial institution hired a security firm to attempt to compromise its computer network.A week later,the firm reported that it had successfully entered the system without apparent detection and presented an analysis of the vulnerabilities that had been found.This is an example of a
A) preventive control.
B) detective control.
C) corrective control.
D) standard control.

Question

Quizplus · Accepted Answer

The hiring of a security firm to attempt to compromise the network and detect vulnerabilities is an example of a detective control. Detective controls are designed to detect and identify security incidents or breaches that have already occurred. The goal of this particular control was to detect any weaknesses in the system before an actual attacker could exploit them.

In 2007,a Major U