Welcome to the Exploiting Physical and Social Vulnerabilities MCQs Page

Dive deep into the fascinating world of Exploiting Physical and Social Vulnerabilities with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Exploiting Physical and Social Vulnerabilities, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Exploiting Physical and Social Vulnerabilities, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Exploiting Physical and Social Vulnerabilities. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Exploiting Physical and Social Vulnerabilities. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Exploiting Physical and Social Vulnerabilities MCQs | Page 1 of 7

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Information Gathering 🔒

04

Vulnerability Scanning 🔒

05

Analyzing Vulnerability Scans

06

Exploiting and Pivoting 🔒

07

Exploiting Network Vulnerabilities 🔒

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q1.

What is a key advantage of physical penetration testing over remote network attacks?

Higher success rate

Faster execution

Easier information gathering

Lower detection rate

Discuss

Answer: (a).Higher success rate Explanation:Physical access to systems, networks, and facilities can provide opportunities that remote network attacks can't. In most cases, direct physical access is one of the best ways to gain higher-level access, making physical penetration tests a powerful tool with a higher success rate.

Q2.

In addition to on-site observation, what is another key requirement for physical penetration testing that distinguishes it from networked penetration tests?

Active reconnaissance

Pretexting

Open source intelligence

Passive reconnaissance

Discuss

Answer: (b).Pretexting Explanation:Physical penetration tests require pretexting, a form of social engineering, in which you present a fictional situation to gain access or information. Information gained in the initial reconnaissance stage provides the detail needed for successful pretexting on-site by making your stories more believable.

Q3.

What is the purpose of a security vestibule in higher-security organizations?

Preventing piggybacking and tailgating

Enhancing employee collaboration

Improving natural lighting in facilities

Streamlining facility access

Discuss

Answer: (a).Preventing piggybacking and tailgating Explanation:A properly implemented security vestibule (sometimes called a mantrap) in higher-security organizations will allow only one person through at a time, and that person will have to unlock two doors, only one of which can be unlocked and opened at a time, preventing piggybacking and tailgating.

Q4.

What technique involves accompanying a legitimate employee to gain unauthorized access to a facility?

Piggybacking

Tailgating

Lock picking

Social engineering

Discuss

Answer: (b).Tailgating Explanation:Tailgating (sometimes called piggybacking) attacks rely on following employees through secured doors or other entrances, making it one of the easiest ways into a facility.

Q5.

What is a potential advantage of dressing as a delivery driver during a physical penetration test?

Bypassing physical security

Unlocking security vestibules

Faster execution of attacks

Gaining employee trust

Discuss

Answer: (a).Bypassing physical security Explanation:Dressing as a delivery driver and bringing a box or other delivery in is a technique to potentially bypass physical security during a physical penetration test. Even if employees won't let you follow them in due to security concerns, they might open the door for a delivery.

Q6.

What is one way penetration testers can bypass locks that don't use keys?

Key duplication from photos

Impression copying

RFID cloning

Push-button manipulation

Discuss

Answer: (c).RFID cloning Explanation:Penetration testers need to pay attention to RFID and magnetic stripe access card systems and cloning tools, as well as any other entry access mechanisms in use in the organization. Cloning devices can be used to duplicate RFID tokens or security cards.

Q7.

What organization provides a guide to U.S. lockpicking laws by state?

LockWiki

Deviant Ollam’s site

The Open Organisation Of Lockpickers (TOOOL)

The LockSport Society

Discuss

Answer: (c).The Open Organisation Of Lockpickers (TOOOL) Explanation:TOOOL provides a guide to U.S. lockpicking laws by state at https://toool.us/laws.html. It's important for penetration testers to be aware of the legality of lockpicking and lockpicks in their area.

Q8.

What is a concern in social engineering exercises related to badge cloning?

Leaving evidence of the clone

Difficulty in using cloning devices

Acquiring the legitimate key

Gaining access for cloning

Discuss

Answer: (d).Gaining access for cloning Explanation:In social engineering exercises, penetration testers may face the challenge of acquiring the legitimate key itself or gaining access to it long enough to clone it. Badge cloning doesn't leave evidence of the copy being made, making it an attractive option.

Q9.

What are "shove keys" used for in lock bypass techniques?

Electronic keypads manipulation

Impression copying

Opening exit doors

Disengaging locks

Discuss

Answer: (d).Disengaging locks Explanation:"Shove keys" are thin metal shims that can be hooked over latches and locks to allow a penetration tester to disengage the lock, making them a tool in lock bypass techniques.

Q10.

How can egress or exit sensors be exploited by penetration testers?

Cloning egress sensors

Disabling egress sensor systems

Using them as an access method

Bypassing RFID sensors

Discuss

Answer: (c).Using them as an access method Explanation:Egress or exit sensors, often used in heavy traffic areas, automatically unlock or open doors for easy staff exit. Penetration testers can exploit them as an access method, taking advantage of the automatic unlocking to gain entry. Some organizations may disable these systems in secure areas due to the vulnerability.

Page 1 of 7

Planning and Scoping Penetration Tests 🔒

Information Gathering 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Exploiting Physical and Social Vulnerabilities MCQs Page

Exploiting Physical and Social Vulnerabilities MCQs | Page 1 of 7

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Reporting and Communication

Suggested Topics

Discrete Mathematics

Reverse Engineering

Data Structures and Algorithms

Systems Analysis and Design Methods

Digital Image Processing (DIP)

Cloud Computing

Human Computer Interaction

Big Data Computing

Data Warehousing and OLAP