Which control is primarily associated with physical security?

• A. Badge access
• B. Data encryption at rest
• C. Password policy
• D. MFA for cloud login

Answer: (A)

Physical security controls focus on preventing unauthorized access to buildings, rooms, and other physical spaces. Badge access is the primary mechanism here because it uses a credential carried by authorized people to unlock doors and gate entries, allowing the organization to grant or revoke entry in real time and to track who entered where and when. This directly controls who can physically be in a space, which is the essence of physical security.

In contrast, data encryption at rest protects information stored on devices from being read if those devices are stolen, but it doesn’t manage who can walk through the door. Password policy and MFA for cloud login secure digital access to systems and data, not the physical entry to a facility. So the option involving badge access best aligns with controlling physical access.