Certified Information Systems Security Professional (CISSP) — Question 99

Which of the following are the three MAIN categories of security controls?

Answer options

• A. Preventative, corrective, detective
• B. Administrative, technical, physical
• C. Corrective, detective, recovery
• D. Confidentiality, integrity, availability

Correct answer: B

Explanation

The correct answer is B, as security controls are categorized into administrative, technical, and physical measures. Options A and C represent different types of controls but do not encompass the main categories. Option D refers to the core principles of information security rather than the types of controls.