Certified Cybersecurity Maturity Model Certification (CMMC) Professional (CCP) Practice Exam

What should be controlled and managed according to the physical protection standards?

1. Digital devices

2. Physical access devices

3. All forms of communication

4. Office supplies

The correct answer is: Physical access devices

The focus on physical protection standards highlights the importance of managing and controlling access to facilities and physical resources. Controlling physical access devices means implementing measures to restrict and monitor entry points to secure areas, ensuring that only authorized personnel can gain access. This is crucial for protecting sensitive information and assets from potential theft, damage, or unauthorized disclosure. Physical access devices include locks, card readers, biometrics, and other security mechanisms that are vital for maintaining the integrity and security of the physical environment. By managing these access controls effectively, organizations can mitigate risks associated with physical security breaches. Other options, while relevant in various contexts, do not align with the specific intent of physical protection standards as directly as physical access devices do. Digital devices may play a role in security but primarily fall under cybersecurity considerations rather than physical access control. All forms of communication typically pertain to information security rather than physical preservation, and office supplies, while important for operational purposes, do not relate directly to physical protection standards. Therefore, the primary concern is the management of physical access devices to safeguard the premises effectively.