easyMultiple Choice
FC0-U71 Practice Question: Prevent unauthorized physical access to its…
A company wants to prevent unauthorized physical access to its server room. Which control is best?
⚠ Common exam trap
It's easy for candidates to confuse logical security controls (firewall, antivirus, encryption) with physical security controls, incorrectly assuming any security technology can prevent physical access, when only a physical access control mechanism like a biometric lock directly addresses the scenario.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Biometric lock
A biometric lock is the best control for preventing unauthorized physical access to a server room because it authenticates individuals based on unique physiological traits (e.g., fingerprint, iris scan), directly securing the physical entry point. Unlike logical or data-level controls, it addresses the physical security domain by restricting who can enter the room, not what data they can access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Firewall
Why it's wrong here
A firewall filters network traffic by port, protocol and IP address; it cannot stop a person walking through a door. It is tempting because firewalls are the default security control for external threats, and they would be correct for restricting logical access to the server room's management subnet.
- ✗
Antivirus
Why it's wrong here
Antivirus targets malicious software on hosts, not physical entry, so it cannot stop someone walking into the server room. It is tempting because it is a recognised security control, but it belongs to endpoint protection; the scenario demands a physical control such as locks or badge readers.
- ✓
Biometric lock
Why this is correct
Biometric locks authenticate a unique physical trait, such as a fingerprint, before the door releases. Unlike keys, badges or PINs, they cannot be shared, copied or guessed, so they directly satisfy the requirement to stop unauthorised physical entry to the server room.
- ✗
Encryption
Why it's wrong here
Encryption protects data confidentiality if media is stolen; it does not restrict who can physically enter the server room. It is tempting because it is a strong security measure, but it addresses data at rest, whereas the requirement is preventing unauthorised physical access, which needs a physical control.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.