ISC2 CC Access Controls Concepts Practice Question
A company requires all visitors to sign in, wear a visible badge, and be escorted while on premises. This is an example of:
⚠ Common exam trap
CC often tests the distinction between physical and logical controls — candidates see 'sign in' and think logical access control, but the scenario describes physical visitor procedures, not system authentication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Visitor management
Visitor management encompasses the administrative and physical controls used to register, badge, and escort non-employees on premises — exactly the sign-in, badge, and escort requirements described. It is a physical security control category focused on controlling and tracking visitors.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Separation of duties
Why it's wrong here
Separation of duties splits a critical task across multiple people to prevent fraud, such as requiring two approvals for payments. Visitor sign-in, badging and escorting is physical access control, not task division, so it fails this scenario despite being a genuine security principle.
- ✗
Logical access control
Why it's wrong here
Logical access control governs data, applications and systems through credentials, permissions and authentication mechanisms. Visitor sign-in, badging and escorting restrict physical entry to premises, so they are physical controls. Logical controls would be correct for restricting file shares or application access.
- ✗
Defense in depth
Why it's wrong here
Defense in depth layers multiple independent controls so no single failure exposes an asset. Visitor sign-in, badging and escorting is one physical control category, not a layered set, so it fails this scenario. Defense in depth would be correct if the question described several overlapping controls.
- ✓
Visitor management
Why this is correct
Visitor management enforces sign-in, badge issuance and escort rules for non-employees, directly satisfying the stem's three on-premises controls. Unlike physical access systems that merely log entry, it governs the full visitor lifecycle from registration through check-out, matching the requirement that all visitors be authenticated, identifiable and supervised.
Go deeper
Related to this question
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.