Certified Ethical Hacker Social Engineering and Physical Security 4

Question 1

An attacker carries a large box and asks an employee to 'hold the door' to a secured area, bypassing badge access. This is an example of:

Accepted Answer

Piggybacking/tailgating with a pretext

Answer

Carrying items to elicit help is a common social engineering pretext to gain unauthorized physical entry.

Question 2

Which type of fence height is generally recommended to deter a determined intruder in physical security planning?

Accepted Answer

8 feet or higher, often with razor wire

Answer

Fences of 8 feet or more, topped with razor wire, are recommended to deter determined intruders.

Question 3

What is the primary security purpose of a 'clean desk policy'?

Accepted Answer

Prevent sensitive documents and credentials from being exposed or stolen

Answer

A clean desk policy reduces the risk of confidential information being viewed, photographed, or removed.

Question 4

An attacker sets up a fake but legitimate-looking login portal that mirrors a company's SSO page to harvest credentials. This is BEST described as:

Accepted Answer

A credential harvesting/phishing site

Answer

A cloned login portal is used to capture (harvest) credentials entered by deceived users.

Question 5

Which control type is a CCTV camera primarily considered in physical security?

Accepted Answer

Detective (and deterrent) control

Answer

CCTV detects and records activity and can deter intruders, making it a detective and deterrent control.

Certified Ethical Hacker Practice Test