CompTIA Security+ (SY0-701) — Question 62
Which of the following security control types does an acceptable use policy best represent?
Answer options
- A. Detective
- B. Compensating
- C. Corrective
- D. Preventive
Correct answer: D
Explanation
An acceptable use policy is considered a preventive control because it is designed to deter inappropriate use of resources before it occurs. Detective controls are focused on identifying incidents after they happen, compensating controls provide alternative measures in lieu of primary controls, and corrective controls are implemented to rectify the situation after a security breach has occurred.