CISA Question 281

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  D. Policy controls are diretive

• Chose D2

  While preventive controls (option B) aim to prevent incidents from occurring, the primary objective of the recommended action is to provide clear directives to ensure appropriate use of the IT equipment following the business division sale. Therefore, it aligns more closely with the concept of directive control.

• Chose D4

  D. Directive control