ISC2 CAP Exam - Topic 8 Question 49 Discussion

Actual exam question for ISC2's CAP exam

Question #: 49
Topic #: 8

[All CAP Questions]

To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to these criteria, which of the following controls are intended to prevent an incident from occurring?

AAdaptive controls

BPreventive controls

CDetective controls

DCorrective controls

Show Suggested Answer

Suggested Answer: B

by Jacqueline at May 03, 2022, 04:46 PM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Izetta

4 months ago

B makes the most sense here, no doubt about it!

upvoted 0 times

...

Francesco

4 months ago

I thought corrective controls could prevent incidents too, but I guess not.

upvoted 0 times

...

Aja

4 months ago

Wait, are adaptive controls not also preventive? I'm confused.

upvoted 0 times

...

Novella

4 months ago

I agree, preventive controls are key to security!

upvoted 0 times

...

Jesus

5 months ago

Definitely B, preventive controls are all about stopping incidents before they happen.

upvoted 0 times

...

Jillian

5 months ago

I keep mixing up the definitions, but I think corrective controls are more about fixing issues after they occur, not preventing them.

upvoted 0 times

...

Rolande

5 months ago

I practiced a similar question where preventive controls were clearly defined as those that aim to prevent incidents, so I’m leaning towards option B.

upvoted 0 times

...

Phil

5 months ago

I'm not entirely sure, but I feel like adaptive controls might also play a role in prevention, though they seem more about adjusting to threats.

upvoted 0 times

...

Marsha

5 months ago

I remember studying about different types of controls, and I think preventive controls are the ones that stop incidents before they happen.

upvoted 0 times

...

Antonio

5 months ago

Okay, I've got it! Match Tokens are used to deduplicate identical resources in Topology Manager, so I'm going to go with option B.

upvoted 0 times

...

Mitzie

5 months ago

This seems straightforward to me. The correct answer is A - it requires the sn_si.admin role to add new items to the Security Incident Catalog. I'm pretty sure about that, but I'll double-check just to be sure.

upvoted 0 times

...

Louann

5 months ago

I'm a bit confused by the terminology here, like VRFs and SGTs. But based on my understanding of SD-WAN, I think option B with GRE tunneling could be a good solution to connect the VNs. It seems like a straightforward way to establish the necessary connectivity.

upvoted 0 times

...

Glendora

5 months ago

Wait, is transfer the same as planning? I'm getting a bit confused on the terminology here. Let me re-read the question and options one more time to make sure I've got it.

upvoted 0 times

...