Requiring manager approval before accessing privileged tools is the correct answer.

Requiring manager approval before accessing privileged tools is an administrative control because it relies on policies and procedures that govern who may obtain privileged access and under what conditions. This measure involves people and management processes and it enforces accountability and separation of duties through approvals and oversight.

Applying firewall rules to block unauthorized network services is incorrect because it is a technical control that is implemented in hardware or software to enforce security at the network layer rather than through management policies or approval workflows.

Deploying CCTV cameras to monitor facility entry points is incorrect because it is a physical control that protects and monitors access to facilities and does not establish policy driven procedures for granting privileged system access.

Posting directional signage to guide delivery drivers to the loading area is incorrect because it is an operational or physical control that aids movement and logistics rather than a policy based control that governs user privileges.

Full AWS Practitioner Certification Question