FC0-U71 Security Practice Question
Which TWO of the following are examples of physical security controls?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A security guard at the entrance
A security guard at the entrance (A) is a physical security control because it involves a human presence that deters, detects, and responds to unauthorized physical access to a facility. A lock on a server room door (E) is also a physical security control, as it is a mechanical barrier that restricts physical access to the servers and other hardware inside. In contrast, a firewall (B) is a logical/network security control that filters traffic based on rules, not a physical barrier. Antivirus software (C) is a host-based logical control that detects and removes malicious code. An intrusion detection system (D) is a logical monitoring control that analyzes network or host activity for signs of attacks, so it is not a physical control either.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A security guard at the entrance
Why this is correct
A security guard is a personnel-based physical control that deters, detects and responds to unauthorised entry at a facility. Guards operate on the physical plane rather than through logical access mechanisms, satisfying the stem's requirement for a physical security control example.
- ✗
A firewall
Why it's wrong here
A firewall filters network traffic in software or hardware, enforcing logical access rules rather than restricting physical access to a facility. It is tempting because firewalls are foundational security controls, but they belong to the technical category; physical controls include locks, fences, guards and badge readers.
- ✗
Antivirus software
Why it's wrong here
Antivirus software detects and removes malicious code on endpoints, operating at the logical layer rather than controlling physical access to premises. It is tempting because antivirus is a core security control, but it is technical, not physical; physical controls include bollards, mantraps, CCTV and locked server racks.
- ✗
An intrusion detection system
Why it's wrong here
An intrusion detection system monitors network or host traffic for malicious activity, a logical monitoring control rather than a barrier to physical entry. It is tempting because IDS protects assets, but it is technical; physical controls include fencing, lighting, locks and security guards restricting site access.
- ✓
A lock on a server room door
Why this is correct
A lock on a server room door is a mechanical physical control restricting entry to the room housing critical hardware. It operates on the physical plane rather than through logical access mechanisms such as permissions or encryption, satisfying the stem's requirement for a physical security control example.
Go deeper
Related to this question
About these practice questions
Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.