nerdexam
CompTIA

PT0-002 · Question #224

A penetration tester needs to access a building that is guarded by locked gates, a security team, and cameras. Which of the following is a technique the tester can use to gain access to the IT…

The correct answer is C. Impersonate a package delivery worker. To gain undetected physical access to a guarded building for IT framework access, impersonating a package delivery worker is a common social engineering technique used by penetration testers to bypass security controls.

Attacks and Exploits

Question

A penetration tester needs to access a building that is guarded by locked gates, a security team, and cameras. Which of the following is a technique the tester can use to gain access to the IT framework without being detected?

Options

  • APick a lock.
  • BDisable the cameras remotely.
  • CImpersonate a package delivery worker.
  • DSend a phishing email.

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    9% (2)
  • C
    83% (19)
  • D
    4% (1)

Why each option

To gain undetected physical access to a guarded building for IT framework access, impersonating a package delivery worker is a common social engineering technique used by penetration testers to bypass security controls.

APick a lock.

Picking a lock carries a high risk of detection by security personnel or surveillance cameras, which directly contradicts the goal of gaining access without being detected.

BDisable the cameras remotely.

Remotely disabling cameras is a complex technical attack that might alert security, assumes vulnerabilities, and does not directly provide access to the building itself.

CImpersonate a package delivery worker.Correct

Impersonating a package delivery worker is a classic social engineering pretext that can allow a penetration tester to bypass physical security controls like locked gates, security teams, and cameras without immediately raising suspicion or detection.

DSend a phishing email.

Sending a phishing email is a digital attack aimed at gaining logical access or information, not a technique for gaining physical entry into a building.

Concept tested: Physical penetration testing - social engineering

Source: https://www.nist.gov/document/nist-sp-800-115-technical-guide-information-security-testing-and-assessment

Topics

#Social Engineering#Physical Penetration Testing#Impersonation#Bypassing Physical Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice