ExpertEasy1 markMultiple Choice
CPA · Question 37 · Area II: Security
Which of the following is a 'corrective' control?
Which of the following is a 'corrective' control?
Answer options:
A.
Biometric door locks.
B.
Security cameras (CCTV).
C.
Restoring data from backups after a ransomware attack.
D.
Security awareness training.
How to approach this question
Prevent (Stop), Detect (See), Correct (Fix). Backups fix the data loss.
Full Answer
C.Restoring data from backups after a ransomware attack.✓ Correct
C
Corrective controls are designed to remedy the circumstances that allowed the unauthorized activity or return conditions to normal. Restoring from backup is the classic corrective control for data loss.
Common mistakes
Thinking backups are preventive (they don't prevent the crash, they help you recover).
Practice the full CPA ISC Practice Exam
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is performing a risk assessment for a client that uses a public cloud provider for its core...HardQ02During a walkthrough of a client's change management process, the auditor notes that developers h...HardQ03A service organization provides a real-time transaction processing platform. The service level ag...HardQ04An auditor is reviewing a SQL query used by the finance team to generate a report of all sales tr...HardQ05A healthcare clearinghouse is preparing for a SOC 2® engagement. They utilize a private cloud dep...Hard