Which of the following is an example of a physical control?

A firewall configured to block unauthorized ports

A mantrap at the entrance to a data center

A policy that requires visitors to sign in at the front desk

An encryption algorithm used to protect data at rest

What is the primary purpose of physical controls in an organization?

To protect physical assets, facilities, and personnel from unauthorized access or harm

To detect and respond to network intrusions

To manage employee behavior through training and procedures

To enforce security policies through software

A software company's development team needs to share sensitive design documents with external contractors. The security team sets up a secure file-sharing portal that requires multi-factor authentication (MFA) and encrypts files at rest. The contractors must also sign a non-disclosure agreement (NDA) before receiving access. Which controls are being applied?

Technical (NDA) and administrative (MFA and encryption)

Technical (MFA and encryption) and administrative (NDA)

Administrative (MFA and encryption) and technical (NDA)

Physical (MFA and encryption) and administrative (NDA)

Certified in Cybersecurity

Domain 1Objective 3

1.3 - Understand Security Controls CC Practice Questions (Page 2)

Part of the Security Principles domain, which accounts for 26% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–21 in this domain), expect 3–4 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

3concepts

26%of the exam

Questions 6–10

6foundation · easy
Which of the following is an example of a physical control?
Select an answer first
7foundation · easy
A company implements a policy that requires two employees to approve any financial transaction. This is an example of which type of control?
Select an answer first
8foundation · easy
What is the primary purpose of physical controls in an organization?
Select an answer first
9foundation · easy
An organization implements full-disk encryption on all laptops. This is an example of which type of security control?
Select an answer first
10application · medium
A software company's development team needs to share sensitive design documents with external contractors. The security team sets up a secure file-sharing portal that requires multi-factor authentication (MFA) and encrypts files at rest. The contractors must also sign a non-disclosure agreement (NDA) before receiving access. Which controls are being applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.

1.3 - Understand Security Controls CC Practice Questions (Page 2)

Questions 6–10

Which of the following is an example of a physical control?

A company implements a policy that requires two employees to approve any financial transaction. This is an example of which type of control?

What is the primary purpose of physical controls in an organization?

An organization implements full-disk encryption on all laptops. This is an example of which type of security control?

Keep studying — Security Principles