A penetration tester is given an assignment lo gain physical access to a secure facility with perimeter cameras. The secure facility does not accept visitors and entry is available only through a…

Question

Options

• AGam entry into the building by posing as a contractor who is performing routine building
• BTailgate into the facility with an employee who has a valid RFID badge to enter
• CDuplicate an employees RFID badge and use an IR camera to see when the guard leaves the
• DLook for an open window that can be used to gain unauthorized entry into the facility

• A
  3% (1)
• B
  19% (6)
• C
  68% (21)
• D
  10% (3)

Explanation

Duplicating an employee's RFID badge (via covert skimming/cloning) defeats the electronic access control, while using an IR (infrared/thermal) camera to monitor the guard's movements allows the tester to time entry when the guard is not observing the door. This approach technically circumvents both security layers (electronic lock and human guard) with minimal visible activity. Answer A (posing as a contractor) fails because the facility explicitly does not accept visitors, making a cover story ineffective. Answer B (tailgating an employee) is high-risk with perimeter cameras actively recording and requires opportunistic timing that may not arise. Answer D (finding an open window) is highly unlikely at a facility specifically hardened with perimeter cameras and badge access, and windows would be captured on camera anyway.

No community discussion yet for this question.