Which pairing correctly matches control type with example?

Which pairing correctly matches control type with example?

• A. Preventive logging, detective auditing, corrective monitoring.
• B. Preventive patching, detective firewall, corrective IDS.
• C. Preventive detecting events (IDS), detective stop issues (firewall), corrective fix problems after they occur (patching).
• D. Preventive stop issues (firewall), detective detect events (IDS), corrective fix problems after they occur (patching).

Answer: (D)

Prevent, detect, and correct are distinct roles that security controls play. A firewall blocks traffic to stop issues from occurring, so it’s a preventive control. An IDS monitors activity and raises alerts when something suspicious happens, making it a detective control. Patching fixes vulnerabilities after they’re found, which is a corrective control. This alignment—firewall as preventive, IDS as detective, and patching as corrective—fits the given pairing best. Other options mix up these roles (for example, labeling patching as preventive or using a firewall as detective), which makes them less accurate.

Prevent, detect, and correct are distinct roles that security controls play. A firewall blocks traffic to stop issues from occurring, so it’s a preventive control. An IDS monitors activity and raises alerts when something suspicious happens, making it a detective control. Patching fixes vulnerabilities after they’re found, which is a corrective control. This alignment—firewall as preventive, IDS as detective, and patching as corrective—fits the given pairing best. Other options mix up these roles (for example, labeling patching as preventive or using a firewall as detective), which makes them less accurate.