nerdexam
(ISC)2

CCSP · Question #170

Which of the following is not one of the types of controls?

The correct answer is A. Transitional. Security controls are broadly categorized as administrative, technical, and physical, whereas 'transitional' is not a standard classification.

Submitted by lucia.co· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following is not one of the types of controls?

Options

  • ATransitional
  • BAdministrative
  • CTechnical
  • DPhysical

How the community answered

(42 responses)
  • A
    88% (37)
  • B
    2% (1)
  • C
    5% (2)
  • D
    5% (2)

Why each option

Security controls are broadly categorized as administrative, technical, and physical, whereas 'transitional' is not a standard classification.

ATransitionalCorrect

Transitional is not a recognized or standard type of security control in information security frameworks. Standard classifications of controls include administrative (or procedural), technical (or logical), and physical controls.

BAdministrative

Administrative controls are policies, procedures, and guidelines that dictate how security is managed within an organization.

CTechnical

Technical controls are hardware or software-based mechanisms used to protect systems and data, such as firewalls, intrusion detection systems, and encryption.

DPhysical

Physical controls are mechanisms used to protect physical assets, such as fences, locks, security guards, and environmental controls.

Concept tested: Types of security controls

Source: https://learn.microsoft.com/en-us/azure/compliance/fundamentals/shared-responsibility-for-cloud-computing#types-of-controls

Topics

#Security Controls#Types of Controls#Administrative Controls#Technical Controls

Community Discussion

No community discussion yet for this question.

Full CCSP Practice