What are the three main types of access controls?

The correct answer is D. Physical access controls, logical access controls, and administrative access controls. The three canonical categories of access controls used in security frameworks (CISSP, CompTIA Security+, ISACA) are: Physical controls (locks, guards, fences - restrict physical access), Logical/Technical controls (firewalls, encryption, ACLs - restrict system/data access via…

Access Controls Concepts

Question

Options

ATechnical access controls, logical access controls, and data access controls
BPhysical access controls, technical access controls, and administrative access controls
CPhysical access controls, data access controls, and administrative access controls
DPhysical access controls, logical access controls, and administrative access controls

How the community answered

(43 responses)

A
2% (1)
B
2% (1)
C
7% (3)
D
88% (38)

Explanation

The three canonical categories of access controls used in security frameworks (CISSP, CompTIA Security+, ISACA) are: Physical controls (locks, guards, fences - restrict physical access), Logical/Technical controls (firewalls, encryption, ACLs - restrict system/data access via technology), and Administrative controls (policies, procedures, training - govern human behavior). Note that 'logical' and 'technical' are used interchangeably in most frameworks. Options A and C introduce 'data access controls' as a separate category, which is not a standard top-level classification. Option B replaces 'logical' with 'technical,' which is close but the standard phrasing in most exam bodies uses 'logical' or treats logical and technical as synonyms.

Topics

#Access Controls#Physical Security#Logical Security#Administrative Controls

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice