Recovery Controls

• A. They block all access to the network during an incident
• B. Recovery controls work with corrective to bring back to normal state
• C. They encrypt data to prevent theft
• D. They provide user authentication for logins

Answer: (B)

Recovery controls are actions used to restore normal operations after an incident. They focus on getting systems and services back online, restoring data, and returning the business to a functioning state as quickly as possible. They work with corrective controls, which address the root cause and prevent recurrence, so together they not only fix what happened but also bring the environment back to normal. The other options describe steps taken during an incident (blocking access) or protective measures (encryption, authentication) rather than the process of returning to normal operations.