Which of the following control helps to identify an incident’s activities and potentially an intruder?

A.
Deterrent

B.
Preventive

C.
Detective

D.
Compensating

Explanation:
Detective control is an access control type that is effective during and after an attack. It is used to record and
analyze the events of a breach to expose the source and target of the attack, the vulnerability targeted, and the
specific tools and methodology used to commit the attack.Incorrect Answers:
A: Deterrent controls discourage users from performing actions on a system.
B: Preventive controls stop actions from taking place.
D: A compensating control is an added security control put in place to counteract weaknesses in other controls.

Conrad, Eric, Seth Misenar, Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham, 2012, p.
27, 28