What is the function of corrective controls?

• A. Brings a system back to its normal state
• B. Monitors ongoing network traffic for anomalies
• C. Encrypts data at rest
• D. Prevents attackers from attempting malicious acts

Answer: (A)

Corrective controls are actions taken after a disruption to restore a system to its normal state. They focus on recovery and bringing operations back online, such as restoring data from backups, repairing damaged configurations, applying fixes, or switching to a redundant system to resume normal services. That’s why the option describing bringing the system back to its normal state is the best fit.

By contrast, monitoring network traffic for anomalies is a detective function—it identifies problems as they occur. Encrypting data at rest is preventive, aiming to protect data and prevent unauthorized access. Preventing attackers from attempting malicious acts is also preventive, designed to stop incidents from happening in the first place.