Which of the following is a physical security control used to restrict access to IT equipment?

• A. Password policy
• B. Antivirus software
• C. Intrusion detection system
• D. Access control badges and doors

Answer: (D)

This question centers on physical security controls—measures that restrict direct, physical access to IT equipment. Using access control badges and doors is a prime example: it physically gates who can enter the areas or cabinets where servers, switches, and other hardware reside, helping prevent tampering, theft, or accidental damage by unauthorized people. The other options protect systems in different ways but do not stop someone from reaching the hardware itself: a password policy governs how users authenticate to systems, not how to keep them out of the equipment area; antivirus software defends against malware on software levels; and an intrusion detection system watches for suspicious activity but doesn’t physically block access to the equipment. So the badge-and-door approach is the correct example of a physical security control that restricts access to IT equipment.