CompTIA Security+ SY0-701 Practice Question

The use of smart cards as an alternative to biometric access controls is an example of a compensating control. Compensating controls are implemented when a primary control is not feasible, providing a substitute that achieves similar security objectives. In this case, smart cards compensate for the lack of biometric authentication by still providing secure access control. Detective controls aim to identify and respond to incidents, corrective controls are used to limit damage after an incident, and deterrent controls are used to discourage potential attackers; these do not describe a control that substitutes for a primary control.