Certified Cloud Security Professional (CCSP) — Question 508

Which of the following is considered an administrative control?

Answer options

• A. Keystroke logging
• B. Access control process
• C. Door locks
• D. Biometric authentication

Correct answer: B

Explanation

The correct answer is B, as the access control process involves policies and procedures set by management to regulate who can access information and resources, which is a hallmark of administrative controls. Options A, C, and D represent technical or physical controls rather than administrative ones.