💡 Physical security controls are measures designed to protect hardware, facilities, and personnel from physical threats, such as unauthorized access, theft, or damage. ච ඡ Locking mechanisms and restricted access to server rooms or data centers ensure that only authorized personnel can physically access critical IT infrastructure, making this a physical security control. Why the other options are incorrect: A. Transaction logs are maintained to capture a history of system processing. ᤶ ᤷ Incorrect – Transaction logs are a logical (technical) security control used for audit trails and monitoring, not a physical security measure. B. System security settings require the use of strong passwords and access controls. ᤶ ᤷ Incorrect – Password policies and access controls are logical (technical) security controls, not physical controls. C. Failed system login attempts are recorded and analyzed to identify potential security incidents. ᤶ ᤷ Incorrect – Monitoring failed login attempts is a detective control for cybersecurity, but it is not a physical security measure.