What type of security measure includes firewalls and intrusion detection systems?

The correct answer highlights preventive controls, which are designed to prevent security incidents from occurring in the first place. Firewalls serve as barriers between internal networks and potential external threats, regulating incoming and outgoing traffic based on predefined security rules. By blocking unauthorized access and filtering malicious traffic, firewalls actively work to prevent breaches and cyberattacks.

Intrusion detection systems also play a critical role in preventative security; however, their primary function is more aligned with monitoring and identifying potential threats rather than stopping them outright. Nevertheless, their presence serves a preventive purpose in that they alert administrators to suspicious activities that could lead to security incidents, allowing them to implement immediate measures to mitigate potential risks.

This differentiation illustrates the focus of preventive controls on stopping threats before they can cause harm, thereby protecting sensitive information and maintaining system integrity.