Certified Information Security Manager (CISM) Practice Exam

Question: 1 / 400

Which of the following is an example of a preventative control?

A fence

A fence serves as a physical barrier that prevents unauthorized access to a facility or area. By creating a boundary, it reduces the risk of intrusion or theft, thus helping to protect the assets within. This is a classic example of a preventative control because its primary purpose is to stop security incidents before they happen.

In contrasting this with the other options, an alarm system is more of a detective control, designed to alert personnel when an unauthorized entry has occurred rather than preventing it outright. An incident response team is focused on responding to and managing security incidents after they take place, making it a form of corrective control. Security awareness training aims to educate employees about security risks and policies, helping to prevent issues indirectly, but it does not physically block access or serve as a direct deterrent in the same way a fence does.

Get further explanation with Examzify DeepDiveBeta

Alarm system

Incident response team

Security awareness training

Next Question

Report this question

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy