PT0-002 · Question #239
A penetration-testing team needs to test the security of electronic records in a company's office. Per the terms of engagement, the penetration test is to be conducted after hours and should not…
The correct answer is B. Climbing in an open window of the adjoining building. The terms of engagement state that the penetration test should not include circumventing the alarm or performing destructive entry, which rules out options A and D. Option C is also not allowed, as it involves social engineering, which is not part of the scope. Option B is the…
Question
A penetration-testing team needs to test the security of electronic records in a company's office. Per the terms of engagement, the penetration test is to be conducted after hours and should not include circumventing the alarm or performing destructive entry. During outside reconnaissance, the team sees an open door from an adjoining building. Which of the following would be allowed under the terms of the engagement?
Options
- APrying the lock open on the records room
- BClimbing in an open window of the adjoining building
- CPresenting a false employee ID to the night guard
- DObstructing the motion sensors in the hallway of the records room
How the community answered
(31 responses)- A3% (1)
- B81% (25)
- C6% (2)
- D10% (3)
Explanation
The terms of engagement state that the penetration test should not include circumventing the alarm or performing destructive entry, which rules out options A and D. Option C is also not allowed, as it involves social engineering, which is not part of the scope. Option B is the only one that does not violate the terms of engagement, as it uses an open door from an adjoining building to gain access to the records room. This can help the penetration tester to test the physical security of the electronic records without breaking any rules.
Topics
Community Discussion
No community discussion yet for this question.