Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D: AUP is a pro-active preventative step ensuring all employees are aware of and bound by the corporation's "Acceptable" use policy and clearly defines the boundaries and implications (such as disciplinary action or termination of employment) if the employee doesn't comply within the AUP.
FYI, I'm positive that it the answers may not be accurate. If in the exam you see "Deter" instead of "Preventive", then select "Deter." If both options are available, I would also choose "Deter" because it deters users from inappropriate or unauthorized behavior by clearly stating rules, expectations, and consequences. AUP does not technically block actions but warns users what is allowed and what is not, and what will happen if they violate the policy. Preventive controls actively stop actions (e.g., firewalls, access controls). An AUP does not stop a user from doing something. it only warns them.
An Acceptable Use Policy sets guidelines and rules for how users should behave when using an organization's network, devices, and other resources. It is preventive in nature because it aims to prevent improper behavior and reduce the likelihood of security incidents before they occur by clearly defining acceptable and unacceptable actions. Preventive controls aim to deter security violations or unwanted behaviors from happening in the first place. AUPs prevent misuse of resources by setting clear boundaries on what is and isn’t allowed, such as restrictions on accessing certain websites or using unauthorized software.