For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeCPA®CPA ISC Practice Exam 2Question 16
    Easy1 markMultiple Choice
    Area II: SecuritySecurity MitigationArea II

    CPA · Question 16 · Area II: Security

    Which of the following is a detective control?

    Answer options:

    A.

    Firewall

    B.

    Encryption

    C.

    Reviewing audit logs

    D.

    Multi-factor authentication

    How to approach this question

    Classify controls: Preventive (stops it), Detective (finds it), Corrective (fixes it).

    Full Answer

    C.Reviewing audit logs✓ Correct
    Reviewing audit logs
    Detective controls are designed to find errors or irregularities after they have occurred. Log review is a classic example.

    Common mistakes

    Classifying firewalls as detective (they prevent access).
    Question 15All questionsQuestion 17

    Practice the full CPA ISC Practice Exam 2

    82 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A service organization provides a cloud-based payroll platform where clients access the software ...MediumQ02An auditor is reviewing the backup strategy for a financial institution that requires a Recovery ...HardQ03During a walkthrough of the change management process, an auditor observes that developers have w...MediumQ04An auditor is reviewing a SQL query used to generate a list of active customers for a marketing c...HardQ05Which of the following entities is considered a 'Covered Entity' under the HIPAA Privacy Rule?Medium
    View all 82 questions →