nerdexam
CompTIA

CAS-003 · Question #538

An external red team member conducts a penetration test, attempting to gain physical access to a large organization's server room in a branch office. During reconnaissance, the red team member sees…

The correct answer is D. Rake picking. Rake picking is the fastest non-destructive technique for opening standard pin tumbler locks because it simultaneously manipulates multiple pins without requiring a matching key blank.

Enterprise Security Operations

Question

An external red team member conducts a penetration test, attempting to gain physical access to a large organization's server room in a branch office. During reconnaissance, the red team member sees a clearly marked door to the server room, located next to the lobby, with a tumbler lock. Which of the following is BEST for the red team member to bring on site to open the locked door as quickly as possible without causing significant damage?

Options

  • AScrewdriver set
  • BBump key
  • CRFID duplicator
  • DRake picking

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    4% (2)
  • D
    93% (52)

Why each option

Rake picking is the fastest non-destructive technique for opening standard pin tumbler locks because it simultaneously manipulates multiple pins without requiring a matching key blank.

AScrewdriver set

A screwdriver set is useful for removing exposed mounting hardware or manipulating certain latch mechanisms but cannot engage or set the internal pin stack of a tumbler lock.

BBump key

A bump key can open pin tumbler locks but requires a key blank cut to the correct keyway profile for the specific target lock - a blank that may not be obtainable without prior knowledge of the lock brand and model.

CRFID duplicator

An RFID duplicator captures and replays proximity card or fob signals for electronic access control systems and has no effect on a mechanical pin tumbler lock.

DRake pickingCorrect

A rake pick uses a serrated or wavy profile to rapidly agitate multiple pin stacks in a pin tumbler lock, setting them to the shear line through a quick in-and-out raking motion that mimics the action of a key. This technique requires no prior knowledge of the specific key blank profile and can open a standard tumbler lock in seconds with no damage to the lock or surrounding door hardware. Rake picking is preferred over single-pin picking for speed and preferred over bump keys when a matched blank is unavailable, making it the most practical choice for quick, low-damage entry.

Concept tested: Physical penetration testing - lock bypass using rake picking

Source: https://csrc.nist.gov/publications/detail/sp/800-115/final

Topics

#physical security#lock picking#penetration testing#red team

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice