The controls that usually require a human to evaluate the input from sensors or cameras to determine if a real
threat exists are associated with:

A.
preventive/physical.

B.
detective/technical.

C.
detective/physical.

D.
detective/administrative.

Explanation:
The detective/physical controls helps to identify an incident’s activities and potentially an intruder using items
put into place to protect facility, personnel, and resources. These items include motion detectors and closedcircuit TVs. Closed-circuit TVs are normally monitored by security guards to detect intruders.
Incorrect Answers:
A: Preventive/physical controls are meant to discourage a potential attacker using items put into place to
protect facility, personnel, and resources. Sensors or cameras are not included in these items.
B: The detective/technical controls helps to identify an incident’s activities and potentially an intruder using
software or hardware components, which include Audit logs and IDS. Sensors or cameras are not included.
D: The detective/administrative controls helps to identify an incident’s activities and potentially an intruder using
management-oriented controls, which include monitoring and supervising, job rotation, and investigations.
Sensors or cameras are not included.References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 28-34