Systems Security Certified Practitioner (SSCP) — Question 3

An Intrusion Detection System (IDS) is what type of control?

Answer options

• A. A preventive control.
• B. A detective control.
• C. A recovery control.
• D. A directive control.

Correct answer: B

Explanation

An Intrusion Detection System (IDS) is classified as a detective control because it monitors network traffic for suspicious activity and alerts administrators to potential security breaches. Preventive controls aim to stop incidents before they occur, recovery controls focus on restoring systems after an incident, and directive controls provide guidelines and policies rather than monitoring capabilities.