What Security Controls Do CCTV Systems and Warning Signs Represent?
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs about the possibility of being filmed. Which of the following best describe these types of controls? (Choose two.)
Community Votes
100% of anonymous learners picked answer BD. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The scenario tests your ability to separate control intent from technical function, highlighting that visible monitoring paired with explicit warnings serves to discourage misconduct (deterrent) and communicate organizational policy (directive) rather than physically stop or automatically log events.
This question evaluates how surveillance equipment and warning signage classify under security control frameworks, with the community consensus firmly identifying them as deterrent and directive measures. Recognizing the psychological and communicative functions of these tools is critical for passing the Security+ exam.
Candidates frequently choose Preventive or Detective due to the inherent recording capability of CCTV cameras; however, they overlook that warning signage fundamentally changes the control's primary purpose to influencing human behavior through awareness and policy communication, which aligns strictly with deterrent and directive classifications.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Control Classification Fundamentals
In cybersecurity frameworks, controls are categorized by their operational purpose. Preventive controls actively block unauthorized actions, Detective controls identify and record ongoing or past incidents, Corrective controls restore systems after an event, and Compensating controls provide alternative safeguards when primary measures are impractical. The question specifically pairs CCTV implementation with posted warning signs, requiring you to evaluate the combined effect on facility security.Why Deterrent and Directive Are Correct
Deterrent controls are designed to discourage potential threats through visibility and the perception of consequences. As noted by community contributors, the combination of cameras and explicit warnings creates a psychological barrier that makes individuals less likely to attempt unauthorized access or sabotage. Directive controls formally communicate organizational policies, rules, or expected behaviors. Posting signs that inform personnel and visitors they may be filmed directly fulfills this role by establishing clear expectations and legal notice of surveillance practices.Why Other Options Are Incorrect
While CCTV technology inherently possesses detective capabilities by recording footage for later review, the explicit emphasis on warning signage in this scenario shifts the exam's focus toward behavioral influence rather than passive monitoring. Selecting Detective ignores the directive nature of the posted notices and misaligns with the official exam logic for this specific question pattern. Preventive controls would require physical barriers like locked doors or access badges that physically stop entry, which cameras cannot do. Corrective and Compensating controls are entirely unrelated to surveillance infrastructure, as they deal with post-incident recovery and alternative risk mitigation strategies respectively.Community Consensus Validation
Multiple verified candidates confirm that BD is the accepted answer, emphasizing that the signs serve a dual purpose: directing compliance and deterring malicious intent. Users consistently highlight that Security+ questions often use the presence of warnings to elevate a tool from purely detective to deterrent/directive, ensuring test-takers understand human-factor security architecture.Official Reference
- CompTIA Security+ SY0-701 Certification Objectives (1.4 Identify and apply security controls)
- NIST Special Publication 800-53 Rev. 5, Appendix F: Security Controls
- CompTIA Official Study Guide: Exam SY0-701, Chapter on Physical and Logical Security Controls
Exam Strategy
When a question asks you to select multiple controls for a single implementation, analyze the primary human-behavior impact rather than just the technical capability. Always scan for keywords like 'posted,' 'warning,' or 'policy' as they strongly indicate directive or deterrent controls, which frequently pair together in SY0-701 scenario-based questions.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →