Certified Ethical Hacker Social Engineering and Physical Security 5

Question 1

An attacker impersonates a delivery courier to gain access to a building's loading dock and then wanders into restricted areas. This highlights the importance of:

Accepted Answer

Visitor escort and access zoning policies

Answer

Visitor escorting and zoned access prevent outsiders from freely moving into restricted areas.

Question 2

What is the main risk of 'pretexting' over the phone to a help desk?

Accepted Answer

The help desk may reset credentials or disclose info to an impostor

Answer

Without proper identity verification, help desks can be tricked into resetting passwords or leaking data.

Question 3

Which technique uses an authoritative-looking but malicious phone charging station or cable to compromise mobile devices in public?

Accepted Answer

Juice jacking

Answer

Juice jacking uses compromised charging ports or cables to steal data or install malware on connected devices.

Question 4

A security guard who verifies badges, signs in visitors, and watches monitors is an example of which control category?

Accepted Answer

Administrative/physical control performed by personnel

Answer

Human guards enforce physical and procedural controls and can respond dynamically to threats.

Question 5

Which of these is the strongest authentication factor to add to badge access for high-security areas?

Accepted Answer

Biometric verification (multi-factor)

Answer

Combining a badge with biometrics adds a second factor that is hard to clone or share.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Social Engineering and Physical Security 5