What functional security control automatically restarts services after detecting a system crash?

The choice of corrective as the correct answer reflects the nature of security controls designed to respond to incidents after they occur. A corrective control is implemented to restore a system or its services to normal operation following a failure or disruption. In this case, when a system crash is detected, the corrective control aims to automatically restart the affected services, thereby minimizing downtime and ensuring continuity of operations.

This is particularly essential in maintaining the resilience of IT systems, as it allows for swift recovery from unexpected failures. By automatically initiating corrective actions, such controls help organizations manage incidents effectively, ensuring that impacted services are brought back online without requiring manual intervention.

Other types of controls, such as preventive, detective, and administrative, serve different purposes. Preventive controls aim to stop incidents from occurring in the first place, while detective controls focus on identifying and alerting when an incident has occurred. Administrative controls involve policies and procedures that govern security practices but do not directly interact with system performance following a crash. Thus, while they play vital roles in an overall security strategy, they do not directly relate to the automatic restoration of services after a failure.