The control measures that are intended to reveal the violations of security policy using software and hardware
are associated with:

A.
preventive/physical.

B.
detective/technical.

C.
detective/physical.

D.
detective/administrative.

Explanation:
The detective/technical controls helps to identify an incident’s activities and potentially an intruder using
software or hardware components, which include Audit logs and IDS.
Incorrect Answers:
A: Preventive/physical controls are meant to discourage a potential attacker using items put into place to
protect facility, personnel, and resources. These items include locks, badge systems, security guards, biometric
system, and mantrap doors.
C: The detective/physical controls helps to identify an incident’s activities and potentially an intruder using items
put into place to protect facility, personnel, and resources. These items include motion detectors and closedcircuit TVs.
D: The detective/administrative controls helps to identify an incident’s activities and potentially an intruder using
management-oriented controls, which include monitoring and supervising, job rotation, and investigations.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 28-34