Courseiva
Security →hardMultiple Select

FC0-U71 Security Practice Question

A company is developing a security policy. Which THREE of the following are examples of physical security controls?

⚠ Common exam trap

Candidates often confuse logical/technical controls (passwords, firewalls) with physical controls; candidates often pick password policies because they 'secure' the company, but the exam requires recognizing that physical controls must restrict tangible access.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Employing security guards to monitor entrances

Option A is correct because security guards monitoring entrances are a classic physical security control, providing deterrence and access control at the facility perimeter. Option D is correct because badge readers on doors are physical access control mechanisms that restrict entry to authorized personnel using credentials such as RFID or smart cards. Option E is correct because biometric locks on server rooms are physical controls that authenticate individuals via fingerprints, iris scans, or similar traits before granting access to sensitive areas. Option B is not a physical control; strong passwords are a logical/technical authentication control. Option C is not a physical control; firewalls are network security devices that filter traffic at the logical layer.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Employing security guards to monitor entrances

    Why this is correct

    Security guards monitoring entrances are a physical control: they restrict and observe direct human access to the facility, deterring intrusion and tailgating. This satisfies the requirement by protecting the tangible premises rather than logical systems, data or user behaviour.

  • ✗

    Requiring employees to use strong passwords

    Why it's wrong here

    Password requirements are a logical or technical access control applied within systems, not a physical barrier restricting contact with facilities or hardware. It is tempting because passwords genuinely protect assets, and would be correct if the policy question concerned logical access controls rather than physical ones.

  • ✗

    Using a firewall to filter network traffic

    Why it's wrong here

    A firewall filters network traffic logically, making it a technical control rather than a physical one. It is tempting because firewalls protect the same assets as physical controls, but physical controls restrict human access through tangible mechanisms such as locks, fences, guards and badge readers.

  • ✓

    Installing badge readers on doors

    Why this is correct

    Badge readers are a physical access control mechanism, restricting entry to authorised personnel at doors. They satisfy the stem's physical security category by gating the facility itself, distinct from logical controls such as passwords or firewalls.

  • ✓

    Locking server rooms with biometric locks

    Why this is correct

    Biometric locks restrict physical entry to server rooms by verifying a unique human trait, preventing unauthorised access to hardware. This satisfies the physical security control requirement by protecting the facility perimeter rather than logical or administrative layers.

About these practice questions

This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

4 more ways this is tested on FC0-U71

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. Which of the following is an example of a physical security control?

easy
  • A.Password policy
  • B.Antivirus software
  • ✓ C.Biometric door lock
  • D.Firewall

Why C: Physical security controls include measures like locks, guards, and biometric scanners to protect physical assets.

Variation 2. Which TWO of the following are examples of physical security controls?

easy
  • ✓ A.A security guard at the entrance
  • B.A firewall
  • C.Antivirus software
  • D.An intrusion detection system
  • ✓ E.A lock on a server room door

Why A: A security guard at the entrance (A) is a physical security control because it involves a human presence that deters, detects, and responds to unauthorized physical access to a facility. A lock on a server room door (E) is also a physical security control, as it is a mechanical barrier that restricts physical access to the servers and other hardware inside. In contrast, a firewall (B) is a logical/network security control that filters traffic based on rules, not a physical barrier. Antivirus software (C) is a host-based logical control that detects and removes malicious code. An intrusion detection system (D) is a logical monitoring control that analyzes network or host activity for signs of attacks, so it is not a physical control either.

Variation 3. A company is implementing physical security measures. Which two of the following are examples of physical security controls? (Select TWO.)

medium
  • A.Enforcing strong passwords
  • B.Using a firewall
  • C.Installing antivirus software
  • ✓ D.Locking screens when leaving the desk
  • ✓ E.Shredding sensitive documents

Why D: Option D (locking screens when leaving the desk) is a physical security control because it prevents unauthorized individuals from physically accessing an unattended workstation and viewing or manipulating data in person. Option E (shredding sensitive documents) is also a physical security control because it destroys physical media so that discarded papers cannot be retrieved and read by unauthorized people. The other options are logical or technical controls rather than physical ones: A (strong passwords) is an authentication/logical control, B (a firewall) is a network security control, and C (antivirus software) is a host-based technical control.

Variation 4. Which TWO of the following are examples of physical security measures? (Select TWO)

medium
  • ✓ A.Locking the computer screen when leaving the desk
  • B.Requiring strong passwords
  • ✓ C.Shredding documents containing confidential information
  • D.Using encryption for sensitive files
  • E.Installing a network firewall

Why A: Option A (locking the computer screen when leaving the desk) is a physical security measure because it prevents unauthorized individuals from physically accessing the unlocked workstation and viewing or manipulating data in person. Option C (shredding documents containing confidential information) is also a physical security measure because it destroys the physical medium (paper) so that confidential data cannot be recovered by dumpster diving or similar physical means. Option B (requiring strong passwords) is a logical/authentication control, not a physical one, since it governs access through credentials rather than physical barriers. Option D (using encryption for sensitive files) is a logical/technical control that protects data confidentiality regardless of physical access. Option E (installing a network firewall) is a technical/network security control that filters traffic, not a physical safeguard.

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official CompTIA exam blueprint

This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.