Which controls can block someone from performing a malicious action?

• A. Detective controls
• B. Administrative controls
• C. Technical Controls
• D. Preventative Controls

Answer: (D)

Preventative controls are about stopping an action before it can occur. They block or deny a malicious attempt at the moment it’s made, by enforcing rules at the entry point—things like requiring valid credentials, enforcing least privilege, and using firewalls or access controls to prevent unauthorized operations. Detective controls, by contrast, watch for problems after they’ve happened and help with detection and response. Administrative controls govern policies, procedures, and training, which influence behavior but don’t automatically halt an action in real time. Technical controls are the technologies used to enforce protections, but the term that directly describes blocking the action before it happens is preventative controls.