Which option is not one of the three primary cybersecurity control types described?

• A. Physical Controls
• B. Preventive Controls
• C. Detective Controls
• D. Corrective Controls

Answer: (A)

The main concept tested is the classification of cybersecurity controls into three primary types: preventive, detective, and corrective. These categories describe how security measures aim to stop incidents, identify when they occur, and restore operations after an incident.

Physical controls fit into physical security rather than the cyber control taxonomy. They include things like doors, locks, badges, surveillance cameras, and secure facilities. While they reduce risk and can indirectly support cybersecurity (for example, by preventing tampering with hardware or limiting access to critical systems), they are not considered one of the three primary cybersecurity control types that focus specifically on cyber-related activities. Therefore, Physical Controls are not one of the main cyber control types described.