Which of the following security controls is a company implementing by deploying HIPS? (Select two.)

Directive controls consist of policies and procedures that guide organizational behavior, rather than technical measures. While they establish a framework for security practices, HIPS does not fit this category since it involves active monitoring and response rather than simply directing behavior through policy.

Physical controls involve protecting physical assets and facilities, such as locks, security guards, or surveillance cameras. HIPS does not pertain to physical security; instead, it operates within the realm of software and network security, focusing on monitoring system integrity.

Corrective controls are designed to restore systems after a security incident has occurred, such as backups or incident response plans. HIPS is proactive in its approach, focusing on prevention and detection rather than responding to already occurred incidents, thus it does not qualify as a corrective control.

Compensating controls are alternative measures implemented to satisfy a security requirement when primary controls are not feasible. HIPS is not a compensating measure; it is a direct technical control aimed at both preventing and detecting intrusions.