Name two common physical AT/FP measures at a facility.

• A. Perimeter security (fencing, barriers) and access control (ID checks, visitor screening) plus surveillance.
• B. Encryption of data at rest and in transit.
• C. Incident response planning and tabletop exercises.
• D. Privacy Act compliance procedures.

Answer: (A)

Focusing on physical protection measures that directly affect entry to and presence at a facility is what this item tests. Perimeter security creates a defined, physical boundary—fences, barriers, and similar features—that raise the effort and risk for anyone attempting unauthorized access. Access control then governs who can pass beyond that boundary, using ID checks, visitor screening, and other verification methods to ensure only authorized individuals enter. Surveillance complements these controls by monitoring activity and providing real-time awareness to deter and detect intrusions. Together, these elements address the tangible, on-site protections that AT/FP at a facility relies on. Options that involve data encryption, incident-response planning, or privacy compliance relate to cyber security, incident management, or administrative requirements, not the physical barriers and entry controls that prevent access to the facility.