Explanation/Reference:
There are many different forms of access control, which in turn can be classified into one or more categories.
Detective - Detective controls are meant to record all activities. They are passive systems that are aware of events but are not designed to prevent them from happening. Audit logging is a form of detective access control.
Incorrect answers:
* Preventative - Controls that provide a barrier between the assets being protected and potential users.
Barriers apply to both attackers and legitimate users. A foundational principle for preventative access control is to ensure that users are properly identified and authenticated.
* Deterrent - A control mechanism that helps to avoid attack based on the potential for being observed or discovered. Deterrent mechanisms are meant to be highly visible. They may consist of detective or preventative controls that provide a deliberate warning of security and consequence. For instance, when users realize that their activities are being logged they are much less likely to attempt to access functions or information not intended for them.
Ä Corrective - Corrective controls take affect after a security event has occurred.
They generally function to help prevent the same type of event from happening again. Corrective controls may involve adjusting access control rules or changing processes to eliminate errors and oversights that resulted in undesired events.
* Recovery - Recovery controls, like corrective controls, take affect after a security event has occurred.
They are designed to restore that system to a normal operating state. For example, restoring data following malicious or accidental deletion.
Reference: Oracle Reference Architecture, Security , Release 3.1