CompTIA Security+ SY0-701 Practice Question
A system that centralizes the storage, analysis, and reporting of log data from various sources within an organization's IT infrastructure performs a preventive role in the security control framework.
This assertion is inaccurate because the primary function of centralizing and analyzing log data is for detection and investigation purposes, matching the definition of a detective control.
This assertion is correct as preventing incidents is a key goal of centralizing and analyzing log data, which is a characteristic of preventive controls.