The Physical Security domain focuses on three areas that are the basis to physically protecting enterprise’s
resources and sensitive information. Which of the following is NOT one of these areas?

A.
Threats

B.
Countermeasures

C.
Vulnerabilities

D.
Risks

Explanation:
“Risks” is not one of the three areas that the Physical Security domain focuses on.
The Physical Security domain addresses the threats, vulnerabilities, and countermeasures that can be utilized
to physically protect an enterprise’s resources and sensitive information. These resources include personnel,
the facility in which they work, and the data, equipment, support systems, and media with which they work.
Physical security often refers to the measures taken to protect systems, buildings, and their related supporting
infrastructure against threats that are associated with the physical environment.
Incorrect Answers:
A: Threats is one of the three areas that the Physical Security domain focuses on. Therefore, this answer is
incorrect.
B: Countermeasures is one of the three areas that the Physical Security domain focuses on. Therefore, this
answer is incorrect.
C: Vulnerabilities is one of the three areas that the Physical Security domain focuses on. Therefore, this answer
is incorrect.

Krutz, Ronald L. and Russell Dean Vines, The CISSP and CAP Prep Guide: Mastering CISSP and CAP, Wiley
Publishing, Indianapolis, 2007, p. 451