Certified Ethical Hacker (CEH) Practice Question

Security controls are often grouped by functional type (preventive, detective, corrective, deterrent) and by implementation type (physical, technical, administrative). CCTV is a physical mechanism because it involves tangible hardware installed in the environment. Its primary purpose is to record and alert staff after suspicious activity occurs, allowing them to discover and investigate incidents. That makes it a detective control. It does not automatically stop or block access (preventive), does not restore normal operations after an event (corrective), and is not primarily intended to discourage actions through psychological means (deterrent). Therefore, CCTV used for post-incident review is best categorized as a detective physical control.