Certified Information Systems Auditor (CISA) — Question 396

A checksum is classified as which type of control?

Answer options

• A. Preventive control
• B. Detective control
• C. Administrative control
• D. Corrective control

Correct answer: B

Explanation

A checksum is used to verify the integrity of data and can detect errors or alterations, making it a detective control. Preventive controls aim to stop issues before they occur, administrative controls involve policies and procedures, and corrective controls address problems after they have been discovered, which do not apply to the function of a checksum.