Scenario: You notice that an unauthorized user has gained access to a privileged account. What type of control should be implemented to alert you of this in the future?

A.  Preventive Control

B.  Detective Control

C.  Deterrent Control

D.  Compensating Control

Answer:  B

Explanation:

Detective Control: These controls are designed to detect and alert when a security incident occurs. Implementing detective controls like intrusion detection systems (IDS), log monitoring, or alerting systems can notify you immediately when unauthorized access to privileged accounts happens.

Here's a breakdown of the other options:

Preventive Control: Preventive controls aim to stop an incident from occurring in the first place. While important, they wouldn't alert you if an unauthorized access actually happens.

Deterrent Control: These controls are designed to discourage potential attackers but don't necessarily detect or prevent unauthorized access. Examples include warning banners or legal notices that state unauthorized access is prohibited.

Compensating Control: These are backup controls that come into play when the main controls fail. While they may detect unauthorized access, their primary purpose is not detection but rather to serve as a secondary layer of security.