An organization wants to ensure that only employees with a valid reason can enter the data center. They currently use a badge system. What additional control would best enforce the principle of least privilege for physical access?

Require a security guard to verify each person's identity

Install CCTV to monitor who enters

Use a mantrap with a badge reader and turnstile

Implement a role-based access control (RBAC) system on the badge

A facility manager wants to protect a high-value asset storage room. The room is in a low-traffic area. Which combination of controls would provide the best defense-in-depth?

Sign-in log and a security guard

Badge reader, CCTV, and motion sensor with alarm

What is the primary purpose of using environmental design (e.g., landscaping, lighting, and building layout) as a physical security control?

To provide a record of all individuals entering the facility

To ensure that only authorized personnel can physically enter the building

To deter and guide legitimate behavior while discouraging unauthorized access

To replace the need for electronic access control systems

A security team is reviewing the effectiveness of their physical access controls. They notice that the badge system logs show an entry at 3:00 AM, but the alarm system did not trigger. Which control would be most useful to determine if the entry was authorized?

Review CCTV footage from that time

Certified in Cybersecurity

Domain 3Objective 1

3.1 - Understand Physical Access Controls CC Practice Questions (Page 1)

Part of the Access Controls Concepts domain, which accounts for 22% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

3concepts

22%of the exam

Questions 1–5

1application · medium
An organization wants to ensure that only employees with a valid reason can enter the data center. They currently use a badge system. What additional control would best enforce the principle of least privilege for physical access?
Select an answer first
2application · medium
A data center wants to prevent tailgating, where an unauthorized person follows an authorized employee through a secured door. Which control is specifically designed to prevent this?
Select an answer first
3expert · hard
A facility manager wants to protect a high-value asset storage room. The room is in a low-traffic area. Which combination of controls would provide the best defense-in-depth?
Select an answer first
4foundation · easy
What is the primary purpose of using environmental design (e.g., landscaping, lighting, and building layout) as a physical security control?
Select an answer first
5expert · hard
A security team is reviewing the effectiveness of their physical access controls. They notice that the badge system logs show an entry at 3:00 AM, but the alarm system did not trigger. Which control would be most useful to determine if the entry was authorized?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.