easyMultiple SelectObjective-mapped
Physical Access Controls — Examples
Which two of the following are examples of physical access controls? (Select TWO)
Quick Answer
The answer is biometric door locks and security guards. Biometric door locks are a physical access control because they use unique biological traits, such as fingerprints or retinal scans, to verify identity before granting entry, directly preventing unauthorized physical access to a facility or server room. Security guards serve as a human barrier to unauthorized entry, monitoring and challenging individuals who attempt to access restricted areas, enforcing physical security policies through observation, verification, and intervention. On the ISC2 Certified in Cybersecurity CC exam, this question tests your ability to distinguish physical controls from logical or administrative controls; a common trap is mistaking a firewall or password policy for a physical control. Remember the memory tip: if you can touch it or it blocks a door, it’s physical—think “biometric badge and badge-wearing guard.”
⚠ Common exam trap
ISC2 often tests the distinction between physical, administrative, and logical/technical controls, and the trap here is that candidates confuse encryption or firewall rules as 'physical' because they are tangible in implementation, but they are actually logical controls that protect data, not physical assets or premises.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security guards
Security guards are a physical access control because they provide a human barrier to unauthorized entry, monitoring and challenging individuals who attempt to access restricted areas. They enforce physical security policies through observation, verification, and intervention, making them a classic example of a deterrent and preventive physical control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Security guards
Why this is correct
Security guards monitor and control physical access to premises.
- ✗
Encryption
Why it's wrong here
Encryption protects data confidentiality but does not control physical access.
- ✗
Password policies
Why it's wrong here
Password policies are logical controls for user authentication.
- ✗
Firewall rules
Why it's wrong here
Firewall rules control network traffic, not physical access.
- ✓
Biometric door locks
Why this is correct
Biometric locks control physical entry to buildings or rooms.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Physical control
Physical controls are tangible security measures like locks, fences, and biometric scanners used to protect buildings, hardware, and sensitive data from unauthorized physical access or harm.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are examples of physical access controls?
easy- A.Encryption
- ✓ B.Biometric scanners
- ✓ C.Smart cards
- D.Intrusion Prevention Systems (IPS)
- E.Firewalls
Why B: Biometric scanners (Option B) are physical access controls because they authenticate individuals based on unique biological traits (e.g., fingerprints, iris patterns) to grant or deny entry to a physical space, such as a server room or data center. This is a tangible, hardware-based mechanism that directly controls physical access, aligning with the definition of physical access controls in the CC exam.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.