Certified Ethical Hacker Social Engineering and Physical Security 5

Question 1

An attacker impersonates a delivery courier to gain access to a building's loading dock and then wanders into restricted areas. This highlights the importance of:

Accepted Answer

Visitor escort and access zoning policies

Answer

Stronger email filters

Answer

Faster internet speeds

Answer

More monitors per desk

Question 2

What is the main risk of 'pretexting' over the phone to a help desk?

Accepted Answer

The help desk may reset credentials or disclose info to an impostor

Answer

The phone line may overheat

Answer

It triggers a DDoS attack

Answer

It encrypts the help desk data

Question 3

Which technique uses an authoritative-looking but malicious phone charging station or cable to compromise mobile devices in public?

Accepted Answer

Juice jacking

Answer

Smishing

Answer

Whaling

Answer

Dumpster diving

Question 4

A security guard who verifies badges, signs in visitors, and watches monitors is an example of which control category?

Accepted Answer

Administrative/physical control performed by personnel

Answer

Cryptographic control

Answer

Network firewall control

Answer

Compiler-level control

Question 5

Which of these is the strongest authentication factor to add to badge access for high-security areas?

Accepted Answer

Biometric verification (multi-factor)

Answer

A longer hallway

Answer

A bigger badge

Answer

A second door handle

Question 6

An attacker observes employees' daily routines, badge styles, and entry times before attempting an intrusion. This preparatory phase is called:

Accepted Answer

Reconnaissance/surveillance

Answer

Exfiltration

Answer

Privilege escalation

Answer

Data encryption

Question 7

Which response BEST reduces the impact of a successful social engineering breach once detected?

Accepted Answer

Incident response activation and credential revocation

Answer

Ignoring it until the next audit

Answer

Publicly blaming the employee

Answer

Turning off all CCTV