New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 1 Question 69 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 69
Topic #: 1
[All ISSEP Questions]

Which of the following techniques are used after a security breach and are intended to limit the

extent of any damage caused by the incident?

Show Suggested Answer Hide Answer
Suggested Answer: A

Corrective controls are used after a security breach. After security has been breached, corrective

controls are intended to limit the extent of

any damage caused by the incident, e.g. by recovering the organization to normal working status as

efficiently as possible.

Answer option D is incorrect. Before the event, preventive controls are intended to prevent an

incident from occurring, e.g. by locking out

unauthorized intruders.

Answer option C is incorrect. During the event, detective controls are intended to identify and

characterize an incident in progress, e.g. by

sounding the intruder alarm and alerting the security guards or the police.

Answer option B is incorrect. Safeguards are those controls that provide some amount of protection

to an asset.


Contribute your Thoughts:

0/2000 characters
Ming
3 months ago
Preventive controls are for before the breach, right?
upvoted 0 times
...
Carmen
3 months ago
Wait, are you sure about that? I thought detective controls also play a role.
upvoted 0 times
...
Val
4 months ago
Totally agree, corrective controls are key!
upvoted 0 times
...
Clay
4 months ago
I thought safeguards were more about prevention, not damage control.
upvoted 0 times
...
Carey
4 months ago
Corrective controls are definitely used after a breach.
upvoted 0 times
...
Emiko
4 months ago
I’m a bit confused; I thought preventive controls were also important after a breach, but maybe they’re more about stopping it before it happens?
upvoted 0 times
...
Denise
4 months ago
This question reminds me of a practice test where we discussed the differences between detective and corrective controls. I think corrective is what we want here.
upvoted 0 times
...
Samira
5 months ago
I'm not entirely sure, but I remember something about safeguards being more about prevention rather than damage control.
upvoted 0 times
...
Karina
5 months ago
I think corrective controls are definitely the right answer since they focus on fixing issues after a breach.
upvoted 0 times
...
Andrew
5 months ago
This question seems straightforward, I'm pretty confident I can identify the statement that is not true.
upvoted 0 times
...
Douglass
5 months ago
This is a good test of my understanding of efficiency. I'll re-read the question and options, and try to apply the definition I know to determine the best answer.
upvoted 0 times
...

Save Cancel