Which term refers to preventative measures to identify and mitigate risks?

Which term refers to preventative measures to identify and mitigate risks?

• A. Security Threats
• B. Proactive Security
• C. Automated Provisioning
• D. Password Synchronization

Answer: (B)

Proactive security is about putting preventative measures in place to identify and reduce risks before they can cause harm. It emphasizes anticipation and action—conducting risk assessments to spot where you might be vulnerable, using threat modeling to understand attacker methods, performing regular vulnerability scans and patch management, and enforcing strong access controls and continuous monitoring. In a CIAM context, this means designing authentication and authorization with risk in mind and applying adaptive, preventive controls rather than just reacting after an incident. Security threats describe potential dangers rather than actions you take to prevent them. Automated provisioning focuses on onboarding and managing user identities, not on reducing risk upfront. Password synchronization deals with keeping credentials aligned across systems, which is a credential management task rather than a preventive risk-control program.

Proactive security is about putting preventative measures in place to identify and reduce risks before they can cause harm. It emphasizes anticipation and action—conducting risk assessments to spot where you might be vulnerable, using threat modeling to understand attacker methods, performing regular vulnerability scans and patch management, and enforcing strong access controls and continuous monitoring. In a CIAM context, this means designing authentication and authorization with risk in mind and applying adaptive, preventive controls rather than just reacting after an incident.

Security threats describe potential dangers rather than actions you take to prevent them. Automated provisioning focuses on onboarding and managing user identities, not on reducing risk upfront. Password synchronization deals with keeping credentials aligned across systems, which is a credential management task rather than a preventive risk-control program.