🎯 Trick 1 — Cameras Prevent Crime?
An exam question asks: "Which physical control PREVENTS unauthorized vehicle access to a data center?" A student answers "CCTV with motion detection." Is this correct?
Cameras are a detective control. They can deter some opportunistic attackers, record incidents for forensic use, and alert guards in real time — but they have no physical stopping power against a vehicle.
The correct answer is bollards. Bollards are a preventive control specifically engineered to stop vehicle intrusion while allowing pedestrian passage. On the exam: whenever a question asks what "prevents" a physical intrusion (especially vehicle-based), think physical barriers first — bollards, barricades, fencing. Cameras detect and record. Barriers prevent.
🎯 Trick 2 — Infrared vs. Motion-Activated Lights
A question describes "a sensor that detects movement and triggers an alarm in a completely dark server room." A student answers "motion-activated lighting." Is this the correct security control?
Infrared (PIR — passive infrared) sensors detect body heat radiation in complete darkness. They trigger alarms and can simultaneously trigger lighting if desired — but the detection mechanism itself is the IR sensor, not the light.
Motion-activated lights improve visibility and deterrence but are not classified as security sensors in the CompTIA framework. On the exam, when you see "sensor" in the question → think IR / pressure / microwave / ultrasonic. When you see "lighting" → that's a separate physical security category.
🎯 Trick 3 — Vestibule = Man Trap?
A question mentions a "man trap" at a facility entrance. Students sometimes think this is a different control from an access control vestibule, or confuse it with a physical cage trap. What is the correct interpretation?
The term "man trap" refers to the ability of the two-door system to "trap" an unauthorized individual between the doors — they can be locked in the chamber and detained without ever gaining access to the interior.
Both terms describe: an enclosed entry chamber with two electronically-controlled doors where only one can open at a time. On the exam, if you see either "man trap" or "access control vestibule" — recognize them as identical controls. The primary purpose is preventing tailgating and enabling identity verification before interior access.
🎯 Trick 4 — Which Sensor Covers the Biggest Area?
An exam asks: "Which sensor type is BEST for monitoring movement across a large outdoor area such as a parking lot or open field?" Students sometimes answer "infrared" because it works in the dark.
Area coverage comparison:
• Infrared: short to medium range, best in enclosed spaces, room-sized coverage
• Pressure: point detection only (a mat, a window)
• Microwave: large area coverage (hundreds to thousands of m²), penetrates some materials, ideal for open exterior areas
• Ultrasonic: medium range, best for enclosed spaces with reflective surfaces
The exam frequently pairs "large area" or "outdoor perimeter" with microwave sensors. Infrared is correct for "complete darkness" scenarios — but the question is about area, not lighting.
🎯 Trick 5 — Two-Person Integrity vs. Separation of Duties
Both two-person integrity and separation of duties involve dividing responsibility between multiple people. A student says they're the same concept. Are they?
Two-Person Integrity (Physical Security): Two people must be SIMULTANEOUSLY PRESENT to access a physical asset or location. Neither can access it alone at any time. Used for vaults, server rooms, nuclear systems. Focus: physical access to a specific asset.
Separation of Duties (Access Control / Administrative): Different roles are assigned different parts of a process so no single person can complete a sensitive transaction alone. Example: one person initiates a wire transfer, a different person approves it. Focus: workflow authorization across a business process.
On the exam: if the question mentions physical presence + entering a room/vault together → two-person integrity. If it mentions workflow steps + authorization stages → separation of duties.
🎯 Performance Task — Physical Security Assessment
A small investment firm occupies the ground floor of a shared office building. Their physical security currently consists of: a reception desk with a part-time guard, standard commercial door locks, and a security camera at the front entrance. They store physical backup drives and print financial documents on-site. Assess their current physical security posture and recommend improvements, prioritized by risk.
1. No perimeter control: Ground floor of a shared building means the firm has no control over who is in the lobby or hallways — anyone in the building can approach their office
2. Standard door locks: No electronic access control, no audit trail of who enters when
3. Single camera at front only: No coverage of side exits, internal hallways, server/storage area
4. Part-time guard: Unmanned reception during gap hours
5. No two-person integrity for backup drive access
Recommended Improvements (prioritized):
Priority 1 — Entry Control: Replace standard lock with electronic badge reader on main office door. Adds audit trail, allows time-limited access, and eliminates key duplication risk.
Priority 2 — Access Control Vestibule (if buildout allows): Add a second controlled door before the reception desk — prevents tailgating into the main office behind a client or delivery person.
Priority 3 — Expanded CCTV: Add cameras at internal hallways, backup storage area, and any secondary exits. Enable motion-detection alerts to guard's phone.
Priority 4 — Two-Person Integrity for Backup Storage: Require two authorized employees to access the physical backup media storage area.
Priority 5 — Guard Coverage: Extend guard hours to cover full business hours, or add after-hours sensor monitoring with alarm response service.
Justification: Entry control (Priority 1) prevents the most common physical attacks — tailgating and unauthorized access — at the lowest cost. Camera expansion (Priority 3) improves detection. Two-person integrity (Priority 4) addresses insider threat for high-value physical assets.