exam questions

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 119 discussion

Actual exam question from Isaca's CRISC
Question #: 119
Topic #: 1
[All CRISC Questions]

Which of the following control detects problem before it can occur?

  • A. Deterrent control
  • B. Detective control
  • C. Compensation control
  • D. Preventative control
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
Preventative controls are the controls that detect the problem before it occurs. They attempt to predict potential problems and make adjustments to prevent those problems to occur in near future. This prediction is being made by monitoring both the system's operations and its inputs.
Incorrect Answers:
A: Deterrent controls are similar to the preventative controls, but they diminish or reverse the attraction of the environment to prevent risk from occurring instead of making adjustments to the environment.
B: Detective controls simply detect and report on the occurrence of a problems. They identify specific symptoms to potential problems.
C: Compensation controls ensure that normal business operations continue by applying appropriate resource.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Stanislav_crisc
Highly Voted 1 year ago
Detective - at the moment of occuring, not before, But preventive do not allow problem to occur, so problem detected (and fixed) before occuring
upvoted 5 times
...
Olorin
Most Recent 4 weeks ago
Selected Answer: D
Its preventive: Before the risk occurs. Deterrent Control after the risk has occured
upvoted 1 times
...
Calvinc
10 months, 1 week ago
The keyword is "before it can occur". So the answer is D.
upvoted 3 times
[Removed]
3 months, 1 week ago
Agree. The question should probably be worded "address" instead of "detect".
upvoted 2 times
...
...
thedood
10 months, 2 weeks ago
IDS, SIEM and audit are examples of detective controls. They do not prevent unless action to do so is taken.
upvoted 1 times
...
Abhaythemagician
1 year ago
Detective is when the problem has occurred and you are doing analysis why the problem occurred, for example SIEM gives you information about logging activities etc. So I think D is right
upvoted 2 times
...
ow
1 year, 1 month ago
Shouldn't the correct answers be Detective and Preventative? The question does not ask whether the control acts on the problem only whether it is detected.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago