During an audit of a data center, an IS auditor’s BEST way to gain an understanding of physical security controls is to:

A. review the data center’s physical security procedures.
B. contact the alarm vendor and identify where alarms are installed in the data center.
C. take a tour of the facility and identify physical security controls.
D. obtain the engineering plans for the building and identify points of entry.