A penetration tester is performing an authorized physical assessment. During the test, the tester observes an access control vestibule and on-site security guards near the entry door in the lobby…

Question

Options

• AClone badge information in public areas of the facility to gain access to restricted areas.
• BTailgate into the facility during a very busy time to gain initial access.
• CPick the lock on the rear entrance to gain access to the facility and try to gain access.
• DDrop USB devices with malware outside of the facility in order to gain access to internal

• A
  10% (6)
• B
  85% (50)
• C
  2% (1)
• D
  3% (2)

Explanation

In an authorized physical assessment, the goal is to test physical security controls. Tailgating is a common and effective technique in such scenarios. Tailgating: This involves following an authorized person into a secure area without proper credentials. During busy times, it's easier to blend in and gain access without being noticed. It tests the effectiveness of physical access controls and security personnel. Cloning Badge Information: This can be effective but requires proximity to employees and specialized equipment, making it more complex and time-consuming. Picking Locks: This is a more invasive technique that carries higher risk and is less stealthy compared to tailgating. Dropping USB Devices: This tests employee awareness and response to malicious devices but does not directly test physical access controls.

No community discussion yet for this question.