Which physical security countermeasures are designed to prevent unauthorized access?

The answer

The correct choice is all of the above: barriers, intrusion detection systems, and access controls are all physical security countermeasures designed to prevent unauthorized access. No single one is "the" answer because effective physical security works through layers—each type does a different job, and they reinforce one another.

• Barriers — fences, walls, bollards, locked doors, and gates that physically block or channel movement.
• Intrusion detection systems (IDS) — sensors, motion detectors, alarms, and cameras that reveal when someone breaches or attempts to breach a boundary.
• Access controls — badges, PINs, biometrics, locks, and guards that verify identity and admit only authorized people.

The deter / detect / delay / deny model

Physical security is usually taught through the defense-in-depth framework, whose four functions explain why you need all three countermeasure types:

• Deter — Visible fences, signage, lighting, and cameras discourage an intruder from trying in the first place.
• Detect — Intrusion detection systems sense and report an attempt so responders know something is happening.
• Delay — Barriers, locks, and multiple checkpoints slow an intruder down, buying time for a response.
• Deny — Access controls stop unauthorized people from entering secured areas entirely.

Map the countermeasures onto these functions and the picture is clear: barriers mostly deter and delay, intrusion detection systems detect, and access controls deny. Remove any one and the chain breaks—a fence with no alarm can be climbed unnoticed; an alarm with no barrier gives no time to respond; a locked door with no detection can be forced in private.

Why the single-option answers are wrong

Any answer that picks only barriers, only detection, or only access controls is incomplete. Choosing just barriers ignores that a determined intruder will eventually breach a fence—you need detection to know and access control to deny entry at sensitive points. Choosing only access controls ignores the perimeter entirely. Because each measure covers a different function of defense-in-depth, the exam answer that recognizes all three as valid countermeasures is the only fully correct one.

The bigger picture

Defense-in-depth is the guiding principle of both physical and cyber security: never rely on a single control. Layering means an attacker must defeat multiple, different obstacles, and any layer can trigger a response before the target is reached. In practice, organizations combine perimeter barriers, surveillance and sensors, controlled entry points, and human guards, and they design them so a failure in one layer is caught by the next. That redundancy—not any single gadget—is what actually prevents unauthorized access.