Physical controls are tangible security measures designed to restrict physical access to assets. Using a smart card and fingerprint scan to enter a sensitive area directly controls physical access to that area.
why the other options are less suitable:
Administrative controls are policies, procedures, guidelines, and standards that define an organization's security posture. Examples include security awareness training, background checks, and data classification policies. While policies might dictate that such access controls are used, the smart card and fingerprint scanner themselves are the physical implementation.
Technical controls use technology to enforce security. Examples include firewalls, intrusion detection systems, and antivirus software. While the smart card reader and fingerprint scanner use technology, their primary function is to physically restrict access, making them physical controls.
Deterrent controls are designed to discourage individuals from attempting to violate security policies. Examples include warning signs, security cameras (the presence of which can deter), and guard dogs. The smart card and fingerprint scan are not primarily meant to deter, but to actively prevent unauthorized access.