Which type of control is primarily implemented by hardware, software or firmware components?

• A. Management controls
• B. Technical controls
• C. Administrative controls
• D. Physical controls

Answer: (B)

The idea being tested is that security measures built into the technology itself—hardware, firmware, and software—fall under technical controls. These controls are applied directly by the systems and devices you use, such as encryption, authentication, access control lists, and firewalls, which operate through the technology stack. Administrative or management controls cover policies, procedures, and governance, not the technical mechanisms themselves. Physical controls involve tangible barriers like locks and guards. So, when a control is implemented by hardware, software, or firmware components, it’s a technical control.