(ISC)2 Certified in Cybersecurity Practice Exam

In the context of security, what does the term "virus" refer to?

1. Preventative Control

2. Detective Control

3. Active Security Measure

4. Network Protection Tool

The correct answer is: Detective Control

In the context of security, the term "virus" refers to a type of malicious software (malware) that can replicate itself and spread from one computer to another. It is important to recognize that viruses are primarily identified by their capacity to infect and compromise systems, which is closely related to the concept of detective controls in cybersecurity. Detective controls are measures that help identify and detect potential security incidents. A virus is often detected by antivirus software, which monitors and analyzes system behavior for known threats, thus enabling organizations to identify when a virus infects a system. When the antivirus software detects signatures associated with a virus, it alerts users and administrators, allowing them to take appropriate actions to mitigate the threat. The other options do not align with the nature of a virus. Preventative controls are designed to stop threats before they occur, while active security measures refer to ongoing actions taken to protect assets. Network protection tools typically focus on safeguarding network infrastructure rather than detecting specific malware like viruses. Hence, the classification of a virus as a detective control is appropriate since its detection is a key aspect in dealing with malware.