easyMultiple SelectObjective-mapped
CRISC Practice Question: Which TWO of the following are examples of…
Which TWO of the following are examples of detective controls?
⚠ Common exam trap
ISACA often tests the distinction between preventive and detective controls by presenting security technologies that have both capabilities (e.g., a firewall with logging), but the trap here is that candidates confuse the control's primary function (e.g., firewall rules are preventive, even if logs are used for detection).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Review of access logs for unauthorized access.
A is correct because reviewing access logs for unauthorized access is a detective control. It involves examining historical records of system access events to identify security incidents or policy violations after they have occurred. This is a classic example of monitoring and analysis, not prevention or correction.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Review of access logs for unauthorized access.
Why this is correct
Detects unauthorized access after the fact.
- ✗
Backup and recovery procedures.
Why it's wrong here
Corrective control.
- ✗
Firewall rules blocking unauthorized traffic.
Why it's wrong here
Preventive control.
- ✗
Separation of duties in financial systems.
Why it's wrong here
Preventive control.
- ✓
Intrusion detection system (IDS) alerts.
Why this is correct
Detects ongoing or past intrusions.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.