nerdexam
(ISC)2

CISSP-ISSAP · Question #134

Which of the following categories of access controls is deployed in the organization to prevent all direct contacts with systems?

The correct answer is B. Physical access control. Physical access control (B) prevents all direct contact with systems by using barriers like locked server rooms, badge readers, mantraps, and security guards - these controls literally stop unauthorized people from physically reaching hardware. Detective controls (A) are wrong…

Infrastructure Security

Question

Which of the following categories of access controls is deployed in the organization to prevent all direct contacts with systems?

Options

  • ADetective access control
  • BPhysical access control
  • CTechnical access control
  • DAdministrative access control

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    89% (17)
  • D
    5% (1)

Explanation

Physical access control (B) prevents all direct contact with systems by using barriers like locked server rooms, badge readers, mantraps, and security guards - these controls literally stop unauthorized people from physically reaching hardware.

Detective controls (A) are wrong because they identify and record incidents after they occur (think cameras and audit logs) - they don't block contact, they document it.

Technical controls (C) are wrong because they operate logically through software (firewalls, encryption, MFA) - they restrict access over networks and systems but don't prevent someone from physically touching a machine.

Administrative controls (D) are wrong because they are policy-based (acceptable use policies, security training, hiring procedures) - they govern behavior through rules, not physical barriers.

Memory tip: Think "Physical = Physical barrier." If the question mentions direct contact, touching, or entering a location, the answer is Physical. The word "direct" is the key signal - only a locked door can stop someone from directly touching a server.

Topics

#Physical Access Control#Facility Security#Perimeter Defense#System Protection

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice