ISC2 CC Security Principles Practice Question
Which of the following is an example of a physical control that supports the availability principle of the CIA triad?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Redundant servers
Availability ensures systems are accessible when needed. Redundant servers provide failover capability, minimizing downtime.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data encryption
Why it's wrong here
Encryption is a logical or cryptographic control protecting confidentiality, not a physical control, and it does not sustain availability. It is tempting because encryption is a foundational safeguard, and it would be the right answer if the question asked how to protect data confidentiality at rest or in transit.
- ✗
Biometric authentication
Why it's wrong here
Biometric authentication is a logical or technical access control verifying identity, not a physical control, and it supports confidentiality rather than availability. It is tempting because biometrics feel tangible, and would be correct if the question asked how to authenticate users through fingerprint or facial recognition.
- ✗
Digital signatures
Why it's wrong here
Digital signatures are a cryptographic control providing integrity and non-repudiation, not a physical control, and they do not maintain availability. They are tempting because they verify authenticity, and would be correct if the question asked how to prove a message's origin and detect tampering.
- ✓
Redundant servers
Why this is correct
Redundant servers directly sustain availability by eliminating single points of failure: if one server fails, others continue serving requests, so the service remains accessible. This satisfies the stem's availability constraint through hardware duplication, unlike logical controls such as backups or access policies, which address integrity or confidentiality instead.
Go deeper
Related to this question
Learn chapter
Access Control Fundamentals
Key term
Physical control
Physical controls are tangible security measures like locks, fences, and biometric scanners used to protect buildings, hardware, and sensitive data from unauthorized physical access or harm.
Key term
Confidentiality Integrity and Availability
The CIA Triad is a foundational security model that ensures data is kept secret, unaltered, and accessible when needed.
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.