ExamGecko
Search Search Login
Home Home / Isaca / IT Risk Fundamentals
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following is used to estimate the frequency and magnitude of a given risk scenario?
Which of the following is the PRIMARY concern with vulnerability assessments?
An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?
Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?
Which of the following is the MAIN objective of governance?
Which of the following would be considered a cyber-risk?
Which of the following is of GREATEST concern when aggregating risk information in management reports?
Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?
Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?
The MOST important reason to monitor implemented controls is to ensure the controls:

Question 47 - IT Risk Fundamentals discussion

Report
Export

An enterprise that uses a two-factor authentication login method for accessing sensitive data has implemented which type of control?

A.

Preventive

Answers
A.

Preventive

B.

Corrective

Answers
B.

Corrective

C.

Detective

Answers
C.

Detective

Suggested answer: A

Explanation:

An enterprise that uses a two-factor authentication login method for accessing sensitive data has implemented a preventive control. Here's why:

Preventive Control: This type of control is designed to prevent security incidents before they occur. Two-factor authentication (2FA) enhances security by requiring two forms of verification (e.g., a password and a mobile code) to access sensitive data. This prevents unauthorized access by ensuring that even if one authentication factor (like a password) is compromised, the second factor remains a barrier to entry.

Corrective Control: These controls come into play after an incident has occurred, aiming to correct or mitigate the impact. Examples include restoring data from backups or applying patches after a vulnerability is exploited. 2FA does not correct an incident but prevents it from happening.

Detective Control: These controls are designed to detect and alert about incidents when they happen. Examples include intrusion detection systems (IDS) and audit logs. 2FA is not about detection but about prevention.

Therefore, two-factor authentication is a preventive control.

Show Answer
asked 18/11/2024
David Kimovec
33 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms