easyMultiple Choice
ISC2 CC Practice Question: Which control type is considered a physical…
Which control type is considered a physical security control?
⚠ Common exam trap
ISC2 often tests the distinction between physical, administrative, and technical controls, and the trap here is that candidates confuse 'security cameras' as a monitoring/logging control (which is technical) rather than recognizing that the camera hardware itself is a physical asset deployed for physical security.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security cameras
Security cameras are a physical security control because they deter, detect, and record unauthorized physical access or activity in a facility. They are deployed as part of a layered physical security strategy, often integrated with access control systems and monitored by security personnel. Unlike logical or administrative controls, cameras directly protect tangible assets and premises.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Firewall rules
Why it's wrong here
Firewall rules are technical controls implemented in software or firmware to filter network traffic; they impose no physical barrier. It is tempting because firewalls guard the perimeter, but that perimeter is logical, whereas physical controls restrict hands-on access to facilities and equipment.
- ✓
Security cameras
Why this is correct
Cameras monitor and record activity in a physical space, so they satisfy the stem's requirement for a physical security control. Unlike logical controls such as access lists or encryption, they operate on the tangible environment, deterring and detecting intrusions at the perimeter or within a facility.
- ✗
User training
Why it's wrong here
User training is an administrative control, altering human behaviour through awareness and procedure rather than restricting physical access. It is tempting because training protects assets indirectly, but physical controls act on the facility itself — locks, fences, guards, badge readers — not on personnel knowledge.
- ✗
Encryption
Why it's wrong here
Encryption is a technical control operating on data confidentiality through cryptographic algorithms, independent of any physical barrier. It is tempting because it protects assets, but it secures data at rest or in transit, whereas physical controls govern tangible access to buildings, rooms and hardware.
Go deeper
Related to this question
Learn chapter
Logical Access Controls
Key term
Security control
A security control is a safeguard or countermeasure designed to protect the confidentiality, integrity, and availability of information systems and data.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.