CompTIA Security+ (SY0-601) — Question 746

Which of the following control types is focused primarily on reducing risk before an incident occurs?

Answer options

• A. Preventive
• B. Deterrent
• C. Corrective
• D. Detective

Correct answer: A

Explanation

The correct answer is A, Preventive, because these controls are designed to avoid incidents from occurring in the first place. The other options, such as Deterrent, Corrective, and Detective, serve different purposes; Deterrent controls aim to discourage incidents, Corrective controls address issues after they occur, and Detective controls identify incidents that have already taken place.