What is an example of corrective control?

A.
Deploying role-based access control to manage permissions

B.
Running an antivirus program after denial of service

C.
Setting up user accounts and passwords to control unauthorized access

D.
Encrypting the data in-flight and data-at-rest

Explanation:
Security Controls: Classification
Based on the roles they play, controls are categorized as preventive, detective, and corrective.
The preventive control attempts to prevent an attack; the detective control detects whether an
attack is in progress; and after an attack is discovered, the corrective controls are implemented.
Preventive controls avert the vulnerabilities from being exploited and prevent an attack or reduce
its impact. Corrective controls reduce the effect of an attack, whereas detective controls discover
attacks and trigger preventive or corrective controls. For example, an Intrusion ejection/Intrusion
Prevention System (IDS/IPS) is a detective control that determines whether an attack is underway
and then attempts to stop it by terminating a network connection or invoking a firewall rule to block
traffic.
EMC E10-001 Student Resource Guide. Module 14: Securing the Storage Infrastructure