Cisco Cyber Security Practice Exam

Which type of controls restore the system after a disaster or event?

1. Preventive Controls

2. Corrective Controls

3. Deterrent Controls

4. Detective Controls

The correct answer is: Corrective Controls

Corrective controls are designed to restore systems or processes after a disaster or an adverse event. These controls focus on rectifying issues following an incident and ensuring that the system can return to its normal state functioning as effectively as possible. Examples of corrective controls include backup systems, disaster recovery plans, and restoration procedures that are enacted after a failure or cyber attack. These measures help to reduce downtime and mitigate the loss of data or functionality, allowing organizations to recover and continue operations. This capability is crucial in cybersecurity, as events such as data breaches or hardware failures can pose significant risks to business continuity. Other types of controls serve different purposes. Preventive controls aim to stop incidents before they occur, detective controls are used to identify and report an incident when it happens, and deterrent controls are intended to discourage potential threats from materializing. Each of these control types plays a distinct role in a comprehensive cybersecurity strategy, but when it comes to restoring systems after an incident, corrective controls are the appropriate choice.