nerdexam
(ISC)2

CCSP · Question #204

Which of the following is considered an administrative control?

The correct answer is A. Access control process. Administrative controls are policies and procedures that guide personnel behavior related to security.

Submitted by khalil_dz· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following is considered an administrative control?

Options

  • AAccess control process
  • BKeystroke logging
  • CDoor locks
  • DBiometric authentication

How the community answered

(67 responses)
  • A
    94% (63)
  • B
    1% (1)
  • C
    1% (1)
  • D
    3% (2)

Why each option

Administrative controls are policies and procedures that guide personnel behavior related to security.

AAccess control processCorrect

An access control process, which defines who has access to what and under what conditions, is a procedural or policy-based control, making it an administrative control.

BKeystroke logging

Keystroke logging is a technical control used for monitoring activity.

CDoor locks

Door locks are physical controls designed to restrict access to a physical space.

DBiometric authentication

Biometric authentication is a technical control used to verify identity based on unique physical or behavioral characteristics.

Concept tested: Types of security controls (administrative, technical, physical)

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-fedramp-controls-by-domain#ac-access-control

Topics

#Security Controls#Administrative Controls#Access Control

Community Discussion

No community discussion yet for this question.

Full CCSP Practice