CompTIA Security+ (SY0-501) — Question 731
Which of the following control types are alerts sent from a SIEM fulfilling based on vulnerability signatures?
Answer options
- A. Preventive
- B. Corrective
- C. Compensating
- D. Detective
Correct answer: D
Explanation
The correct answer is D, as alerts from a SIEM (Security Information and Event Management) system are designed to detect vulnerabilities and security incidents. Preventive controls aim to stop incidents from occurring, corrective controls deal with rectifying issues after they happen, and compensating controls provide an alternative solution but do not directly detect vulnerabilities.