Reviewing audit logs is an example of which security function?

A.
Preventive

B.
Detective

C.
Deterrence

D.
Corrective

Explanation:
Reviewing audit logs takes place after the fact, after some type ofincident happens. It is detective in nature because the security professional istrying to figure out what exactly happened, how to correct it, and possibly who isresponsible.