nerdexam
(ISC)2

CCSP · Question #118

Which of the following are not examples of personnel controls?

The correct answer is C. Strict access control mechanisms. Strict access control mechanisms are considered technical or administrative controls, not personnel controls, which focus on human factors.

Submitted by andreas_gr· Apr 18, 2026Cloud Security Operations

Question

Which of the following are not examples of personnel controls?

Options

  • ABackground checks
  • BReference checks
  • CStrict access control mechanisms
  • DContinuous security training

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    89% (32)
  • D
    6% (2)

Why each option

Strict access control mechanisms are considered technical or administrative controls, not personnel controls, which focus on human factors.

ABackground checks

Background checks are personnel controls used to vet individuals before employment to assess their trustworthiness.

BReference checks

Reference checks are personnel controls used to verify information and assess a candidate's suitability for a role.

CStrict access control mechanismsCorrect

Strict access control mechanisms are technical or administrative controls implemented to restrict access to systems and data based on predefined rules. Personnel controls, by contrast, relate to the human element of security, such as screening, training, and management of staff.

DContinuous security training

Continuous security training is a personnel control designed to educate employees on security policies and best practices, maintaining awareness.

Concept tested: Types of security controls (personnel vs. technical)

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#Personnel Security#Security Controls#Access Control#Security Operations

Community Discussion

No community discussion yet for this question.

Full CCSP Practice