To improve the security at a data center, a security administrator implements a CCTV system and posts several signs about the possibility of being filmed. Which of the following best describe these types of controls? (Choose two.)

CCTV systems and signs serve as both deterrent and detective controls. They are deterrent because the visible presence of cameras and warnings aims to discourage potential attackers or unauthorized individuals from attempting malicious activities, making them think twice before acting. They are detective because if an incident does occur, the CCTV system records evidence, allowing security personnel to review footage, identify perpetrators, and understand the sequence of events after the fact. Preventive controls would actively stop an event from happening (e.g., a locked door). Corrective controls would fix an issue after it occurs (e.g., restoring data from a backup). Directive controls guide behavior (e.g., security policies). Compensating controls provide an alternative when a primary control isn't feasible.