ISC2 CC Access Controls Concepts Practice Question
A security administrator is reviewing physical access controls. Which control is considered an external perimeter security measure?
⚠ Common exam trap
The trap is that candidates pick the most 'secure-sounding' control (biometrics) rather than the one that actually sits at the external perimeter — the exam tests whether you can distinguish perimeter from interior and administrative controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fencing around the property
Fencing around the property is an external perimeter security measure because it establishes the outermost physical boundary of the facility, deterring and delaying unauthorized entry before an attacker reaches the building. Perimeter controls focus on the site's outer edge, while the other options protect interior assets or personnel behavior. Fencing, bollards, lighting, and gates are classic examples of external perimeter defenses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Biometric reader on server room door
Why it's wrong here
A biometric reader on a server room door authenticates individuals at an interior checkpoint, controlling access to a specific high-security zone rather than the facility's outer boundary. It is the correct choice for restricting entry to sensitive internal areas, whereas external perimeter measures such as fences and bollards protect the site's edge.
- ✗
Cable locks on laptops
Why it's wrong here
Cable locks secure individual laptops against theft in shared or public spaces, an asset-level control rather than a boundary protecting a facility's outer edge. They are the correct choice for safeguarding portable devices, whereas external perimeter measures such as fences, bollards and exterior lighting control access to the site itself.
- ✗
Visitor badge policy
Why it's wrong here
A visitor badge policy governs identification and escorting of guests once they are inside the building, an administrative control applied at reception rather than at the site boundary. It is the correct choice for managing internal visitor movement, while external perimeter measures such as fences and gates control entry to the grounds.
- ✓
Fencing around the property
Why this is correct
Fencing defines the outer physical boundary of a site, delaying or deterring intruders before they reach the building. It therefore operates as an external perimeter measure, satisfying the stem's requirement, whereas locks and badge readers sit at internal entry points.
Go deeper
Related to this question
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.