A surveillance camera is a physical security control that monitors and records activity in a space to detect, deter, and investigate physical attacks like unauthorized access or piggybacking, part of the layered defenses covered in AP Cybersecurity Unit 2.
A surveillance camera is a monitoring tool that watches a physical space and records what happens there. In AP Cybersecurity, it's one of the physical security controls you use to defend the spaces where computers and data live (Topic 2.2).
Think of it as the "eyes" of your security setup. A lock keeps someone out, but a camera tells you who tried to get in and when. That matters because EK 2.2.C.1 says physical access to devices lets adversaries bypass many technical controls. A camera doesn't stop a door from opening, but it catches the person doing it, which both deters attacks and gives you a record to investigate them later. It's especially useful against social engineering attacks like piggybacking (EK 2.2.A.2), where an adversary tricks an authorized person into holding a door open for them.
Surveillance cameras live in Unit 2: Securing Spaces, specifically Topic 2.2 on physical vulnerabilities and attacks. They directly support AP Cybersecurity 2.2.B (explaining how threats exploit physical vulnerabilities) and AP Cybersecurity 2.2.C (assessing and documenting risk). The illustrative example in EK 2.2.C.2 calls out a server room accessed through an "unmonitored hallway" as a high risk, and a camera is exactly what turns an unmonitored space into a monitored one. The big-picture theme: cybersecurity isn't just firewalls and passwords. Physical defenses count too, and cameras are a core piece of that defense-in-depth approach.
Keep studying AP Cybersecurity Unit 2
Visual cheatsheet
view galleryMotion Sensor (Unit 2)
A motion sensor and a camera both detect activity in a space, but a sensor just triggers an alert while a camera gives you a visual record of who and what. They often work as a pair, with the sensor waking up the camera.
Access Control Vestibule (Unit 2)
An access control vestibule physically stops piggybacking by only letting one person through at a time. A camera complements it by recording anyone who tries to tailgate, so you have both prevention and detection.
Piggybacking and Social Engineering (Unit 2)
Piggybacking (EK 2.2.A.2) relies on tricking a human into granting access. Cameras don't stop the trick in the moment, but the recorded footage deters attackers and helps you investigate the breach afterward.
Physical Perimeter (Unit 2)
Cameras are one layer of a physical perimeter alongside fencing, bollards, and badge access. The idea is that no single control is enough, so you stack monitoring on top of barriers.
Expect surveillance cameras to show up in multiple-choice questions about layered physical defense. A real practice stem describes a data center using biometric scanners, security guards, and surveillance cameras at all entry points and asks which security approach this describes (the answer is defense-in-depth, or layered security). The skill being tested: recognizing that cameras are a detective control, not a preventive one, and that they're one piece of a stacked defense. On a free-response style task, you might assess the risk of an unmonitored space (per EK 2.2.C.2) and recommend a camera as part of your fix. Tie it to detection and accountability, not to blocking entry.
Both detect activity, but a motion sensor only senses movement and triggers an alarm, while a surveillance camera captures a visual record of who did what. If a question asks for identification and evidence after the fact, that's a camera, not a sensor.
A surveillance camera is a detective physical control that monitors and records a space, so it deters and documents attacks rather than physically blocking them.
Cameras turn the high-risk "unmonitored hallway" scenario from EK 2.2.C.2 into a monitored one, lowering the risk to physical assets.
On the exam, cameras almost always appear as one layer in a defense-in-depth setup alongside guards, badge access, and biometrics.
Cameras help counter social engineering attacks like piggybacking by recording anyone who tailgates an authorized person through a door.
Remember the distinction: a lock or vestibule prevents access, but a camera detects and records it.
It's a physical security control in Unit 2 that monitors and records a space to detect, deter, and investigate physical attacks such as unauthorized access or piggybacking. It's part of the layered defense covered in Topic 2.2.
Not directly. A camera is a detective control, meaning it detects and records activity rather than physically blocking entry. To actually stop access you'd pair it with preventive controls like badge access, an access control vestibule, or a lock.
A motion sensor only senses movement and can trigger an alarm, while a surveillance camera captures a visual record of who entered and what they did. Choose the camera when a question asks about identifying an intruder or keeping evidence after an incident.
Because physical access to devices lets adversaries bypass many technical controls (EK 2.2.C.1). A locked-down network doesn't help if someone can walk into the server room, so cameras and other physical controls are a real part of defense-in-depth.
They typically appear in multiple-choice questions about layered physical defense, like a data center using biometrics, guards, and cameras together, where the answer is defense-in-depth. You may also identify cameras as a fix when assessing risk in an unmonitored space under Topic 2.2.
Connect this key term to the AP exam workflow: review the course, practice questions, and check related study tools.