Which of the following is not a physical control for physical security?

A.
lighting

B.
fences

C.
training

D.
facility construction materials

Explanation:
Training is an administrative control, not a physical control.
Controls are put into place to reduce the risk an organization faces, and they come in three main flavors:
administrative, technical, and physical. Administrative controls are commonly referred to as “soft controls”
because they are more management-oriented. Examples of administrative controls are security documentation,
risk management, personnel security, and training. Technical controls (also called logical controls) are software
or hardware components, as in firewalls, IDS, encryption, identification and authentication mechanisms. And
physical controls are items put into place to protect facility, personnel, and resources. Examples of physical
controls are security guards, locks, fencing, and lighting.
Incorrect Answers:
A: Lighting is an example of a physical control. Therefore, this answer is incorrect.
B: Fences are an example of a physical control. Therefore, this answer is incorrect.D: Facility construction materials are an example of a physical control. Therefore, this answer is incorrect.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 28