Certified Ethical Hacker (CEHv10) Practice Test 2025 – Your All-in-One Guide to Exam Success!

Detective controls are mechanisms put in place to identify and detect security incidents or breaches that may have occurred within an environment. Video surveillance serves this purpose effectively. It allows for real-time monitoring and the recording of activities within a premises. If a security incident occurs, video footage can be reviewed to understand what happened, when it happened, and potentially identify those involved. This ability to provide evidence of incidents makes video surveillance a prime example of a detective control.

In contrast, firewalls are preventative controls that act as a barrier to block unauthorized access to or from a network. Encryption is a method of securing data to prevent unauthorized access and is therefore a protective control. Access control lists (ACLs) regulate access to resources based on permissions but do not provide a means to detect incidents after they occur. Thus, while all of these options serve important roles in information security, only video surveillance aligns with the function of detecting and documenting security events.