Prevention in base security aims to:

• A. Continue operations regardless of risk.
• B. Identify incidents after they occur and fix.
• C. Prevent incidents before they occur by reducing vulnerabilities.
• D. Allocate all resources to recovery planning only.

Answer: (C)

Prevention in base security focuses on stopping incidents before they happen by reducing vulnerabilities and strengthening controls. This means proactively building defenses—patching and hardening systems, enforcing least-privilege access, implementing strong authentication, segmenting networks, secure configurations, continuous monitoring, and user training—to lower both the likelihood and impact of threats.

This approach is about staying ahead of problems rather than just reacting to them. That’s why the best answer emphasizes preventing incidents before they occur by reducing vulnerabilities. The other options describe either reacting after an incident, ignoring risk, or allocating resources exclusively to recovery planning, all of which neglect proactive protection.