Which of the following items are examples of preventive physical controls? Each correct answer represents a complete solution. Choose three.

Preventive physical controls are designed to proactively stop a security incident from occurring. Biometric access controls and locks/keys are direct preventive measures, as they physically or logically block unauthorized individuals from entering a restricted area. Closed-circuit television (CCTV) serves as a preventive control through deterrence. The visible presence of cameras discourages potential intruders from attempting a breach, thereby preventing the incident. These controls work together to reduce the likelihood of a physical security event.

C. Fire extinguishers: This is a corrective control. It is used to mitigate damage and recover from an incident (a fire) after it has already started, not to prevent it.

1. National Institute of Standards and Technology (NIST) Special Publication 800-53

Revision 5

"Security and Privacy Controls for Information Systems and Organizations."

Reference for A and D: Control PE-3

"Physical Access Control

" describes implementing physical access controls at entry/exit points

which includes locks and biometric systems to "prevent...unauthorized physical access." (Section 2

Page 231).

Reference for C: Control PE-13

"Fire Protection

" discusses implementing fire suppression systems. These are responsive (corrective) measures taken once a fire is detected. (Section 2

Page 241).

2. Pfleeger

C. P.

Pfleeger

S. L.

& Margulies

J. (2015). Security in Computing (5th ed.). Prentice Hall.

Reference for B: The text discusses how controls can serve multiple purposes. While a camera's primary function is detection

its visibility makes it a deterrent. The text states

"A preventive control blocks an attack... A deterrent control may not block an attack but may discourage an attacker." Deterrence is a form of prevention by influencing behavior before an act is committed. (Chapter 1

Section 1.4.2

"Controls").

3. Harris

S. (2013). CISSP All-in-One Exam Guide (6th ed.). McGraw-Hill.

Reference for A

B

D: This foundational security text categorizes controls. It explicitly lists "locks

mantraps

and biometric access controls" as preventive. It also classifies "CCTV" as a deterrent control

which is a type of preventive control because it is "deployed to discourage violations of security policies." (Chapter 5

"Security Architecture and Design

" Pages 228-229).