Which option correctly pairs security control types with an example for each (physical, technical, administrative)?

Which option correctly pairs security control types with an example for each (physical, technical, administrative)?

• A. Physical controls: Locked data centers; Technical controls: Encryption; Administrative controls: Policies and training.
• B. Physical controls: Firewall; Technical controls: Password policy; Administrative controls: Locked doors.
• C. Physical controls: Encryption; Technical controls: Training; Administrative controls: Physical locks.
• D. Physical controls: Antivirus; Technical controls: Staff rotation; Administrative controls: Spare hardware.

Answer: (A)

Security controls fall into three categories: physical, technical, and administrative. Physical controls are tangible barriers or measures that limit access to the environment (like locks and secured doors). Technical controls use technology to protect data and systems (such as encryption and access controls). Administrative controls are policies, procedures, and training that govern behavior and governance. The pairing that fits best is: - Physical: Locked data centers — a clear physical barrier restricting access. - Technical: Encryption — a technology-based method to protect data. - Administrative: Policies and training — governance and education guiding how people behave and operate. Other options mix these categories (for example, a firewall is a technical control, not physical; a password policy is administrative, not technical). This misalignment is why the chosen pairing is the most appropriate.

Security controls fall into three categories: physical, technical, and administrative. Physical controls are tangible barriers or measures that limit access to the environment (like locks and secured doors). Technical controls use technology to protect data and systems (such as encryption and access controls). Administrative controls are policies, procedures, and training that govern behavior and governance.

The pairing that fits best is:

• Physical: Locked data centers — a clear physical barrier restricting access.

• Technical: Encryption — a technology-based method to protect data.

• Administrative: Policies and training — governance and education guiding how people behave and operate.

Other options mix these categories (for example, a firewall is a technical control, not physical; a password policy is administrative, not technical). This misalignment is why the chosen pairing is the most appropriate.