Network Security (NETSEC) 1 Practice Test

Countermeasures in security are controls designed to reduce risk by preventing, detecting, or correcting security incidents. Preventative countermeasures aim to stop threats before they cause harm, such as implementing strong authentication, least-privilege access, timely patch management, secure configurations, and network segmentation. Detective countermeasures focus on finding incidents as they occur or after they happen, with tools like intrusion detection systems, security monitoring, log analysis, and regular audits. Corrective countermeasures come into play after an incident to restore normal operations and minimize impact, including backups and restoration, disaster recovery planning, remediation steps, and incident response procedures. When you combine preventive, detective, and corrective measures, you achieve a more resilient security posture through defense in depth. All of these are valid types of countermeasures, which is why the best choice is that all of the above.