Which of the following control types does this BEST represent?

A security administrator is setting up a SIEM to help monitor for notable events across the enterprise.

Which of the following control types does this BEST represent?
A . Preventive
B . Compensating
C . Corrective
D . Detective

View Answer

Answer: D

Explanation:

A SIEM is a security solution that helps detect security incidents by monitoring for notable events across the enterprise. A detective control is a control that is designed to detect security incidents and respond to them. Therefore, a SIEM represents a detective control.

Reference: CompTIA Security+ Study Guide, Exam SY0-601, Chapter 3: Architecture and Design