ISC2 CC Access Controls Concepts Practice Question
A visitor enters a company building and is required to sign in, present identification, and wear a visitor badge. This is an example of which type of access control?
⚠ Common exam trap
The trap here is conflating physical controls with administrative or technical controls because visitor sign-in involves a procedure (administrative) and a badge system (technical), but the scenario's core is controlling physical entry.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Physical access control
Physical access control governs access to tangible facilities, buildings, rooms, and equipment, and the scenario describes exactly that: a visitor signing in, showing ID, and wearing a badge to enter a company building. These are physical safeguards designed to control who can enter a physical space. Logical, administrative, and technical controls address different domains such as systems, policies, and technology enforcement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Physical access control
Why this is correct
Signing in, presenting identification and wearing a visitor badge are tangible measures regulating who enters the building. They restrict human movement through the facility, which defines physical access control rather than logical or administrative control.
- ✗
Logical access control
Why it's wrong here
Logical access controls govern access to systems, data and networks through technical mechanisms such as permissions, authentication and encryption; signing in at a reception desk involves no such mechanism. It is tempting because sign-in and identity checks feel like access control, and logical controls would be correct if the visitor were authenticating to a network or application.
- ✗
Administrative control
Why it's wrong here
Administrative controls are policies, procedures and training that direct behaviour; the sign-in, identification and badge steps are physical controls restricting movement through a facility. It is tempting because a written visitor policy underpins the process, and administrative controls would be correct if the question asked about the governing policy rather than the physical measures.
- ✗
Technical control
Why it's wrong here
Technical controls are enforced by hardware or software, such as firewalls, encryption and authentication systems; a receptionist checking identification and issuing a badge is a physical control. It is tempting because badges and sign-in logs involve technology, and technical controls would be correct if the visitor authenticated to a system rather than entering a building.
Go deeper
Related to this question
Learn chapter
Physical Access Controls
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.