CompTIA Security+ (SY0-701) — Question 150

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

Answer options

• A. Corrective
• B. Preventive
• C. Detective
• D. Deterrent

Correct answer: C

Explanation

The correct answer is C, as a SIEM system is used to identify and analyze security events, which falls under detective controls. Corrective controls aim to fix issues after they occur, preventive controls are designed to stop incidents before they happen, and deterrent controls are meant to discourage potential threats, none of which directly relate to the log review process.