CVA Social Engineering & Physical Security Testing Flashcards

Which type of phishing attack specifically targets high-level executives or senior management?

Answer: Whaling

Whaling targets C-suite executives and senior leaders with highly tailored phishing attacks, recognizing that they have access to the most sensitive data and authorization capabilities.

During a physical security assessment, what is the purpose of testing RFID badge cloning?

Answer: To determine if access control cards can be duplicated to enable unauthorized physical access

RFID badge cloning tests whether access control cards (especially older 125kHz HID cards) can be duplicated using commercially available readers, enabling unauthorized facility access.

What is the goal of a 'pretexting call' to an organization's help desk during a social engineering assessment?

Answer: To determine if help desk staff can be manipulated into resetting credentials or providing access without proper identity verification

Help desk pretexting tests whether support staff will bypass identity verification procedures when presented with a convincing false scenario, potentially resetting credentials for an attacker.

Which physical security control is specifically designed to prevent tailgating by allowing only one person to enter per authentication event?

Answer: Mantrap (airlock)

A mantrap (airlock) uses two interlocking doors where only one can open at a time, ensuring that only the authenticated individual can enter the secured area.

What is 'open-source intelligence (OSINT)' and how is it used in social engineering assessments?

Answer: Gathering publicly available information about targets from social media, websites, and public records to craft convincing attacks

OSINT collection from LinkedIn, social media, company websites, and public records provides attackers with information to craft highly convincing and personalized social engineering attacks.

During a physical security walk-through, you notice employees often prop open secured doors for convenience. What control weakness does this represent?

Answer: Door prop detection and security culture failure — access controls are bypassed by user behavior

Propping open secured doors bypasses physical access controls and represents both a technical control failure (no door prop alarms) and a security culture issue requiring awareness training.