Certified Ethical Hacker Social Engineering and Physical Security 4

Question 1

An attacker carries a large box and asks an employee to 'hold the door' to a secured area, bypassing badge access. This is an example of:

Accepted Answer

Piggybacking/tailgating with a pretext

Answer

A pharming attack

Answer

A SQL injection

Answer

Credential stuffing

Question 2

Which type of fence height is generally recommended to deter a determined intruder in physical security planning?

Accepted Answer

8 feet or higher, often with razor wire

Answer

2 feet decorative fencing

Answer

No fence, only signage

Answer

A single hedge row

Question 3

What is the primary security purpose of a 'clean desk policy'?

Accepted Answer

Prevent sensitive documents and credentials from being exposed or stolen

Answer

Improve office aesthetics only

Answer

Reduce electricity usage

Answer

Speed up network performance

Question 4

An attacker sets up a fake but legitimate-looking login portal that mirrors a company's SSO page to harvest credentials. This is BEST described as:

Accepted Answer

A credential harvesting/phishing site

Answer

A mantrap

Answer

Dumpster diving

Answer

Shoulder surfing

Question 5

Which control type is a CCTV camera primarily considered in physical security?

Accepted Answer

Detective (and deterrent) control

Answer

Corrective control only

Answer

Cryptographic control

Answer

Logical access control

Question 6

A 'reverse social engineering' attack typically involves the attacker:

Accepted Answer

Creating a problem, then offering to be the 'helper' the victim seeks out

Answer

Calling the victim directly to demand a password

Answer

Mailing a malicious USB drive

Answer

Hacking the database remotely

Question 7

Which of the following BEST mitigates risk from lost or stolen laptops containing sensitive data?

Accepted Answer

Full-disk encryption

Answer

A louder keyboard

Answer

Disabling the trackpad

Answer

A brighter screen