CompTIA Security+ (SY0-601) — Question 270

Physical access to the organization's servers in the data center requires entry and exit through multiple access points: a lobby, an access control vestibule, three doors leading to the server floor, a door to the server floor itself, and eventually to a caged area solely for the organization’s hardware. Which of the following controls is described in this scenario?

Answer options

• A. Compensating
• B. Deterrent
• C. Preventive
• D. Detective

Correct answer: C

Explanation

The correct answer is C, Preventive, as the multiple access points and controlled entry are designed to prevent unauthorized access to the servers. Options A, B, and D do not fit because compensating controls are alternatives to primary controls, deterrent controls aim to discourage unauthorized access, and detective controls are meant to identify breaches after they occur.