A Penetration Tester Has Been Contracted to Conduct a Physical

question 107

Multiple Choice

A penetration tester has been contracted to conduct a physical assessment of a site. Which of the following is the MOST plausible method of social engineering to be conducted during this engagement?

• A) Randomly calling customer employees and posing as a help desk technician requiring user password to resolve issues
• B) Posing as a copier service technician and indicating the equipment had "phoned home" to alert the technician for a service call
• C) Simulating an illness while at a client location for a sales call and then recovering once listening devices are installed
• D) Obtaining fake government credentials and impersonating law enforcement to gain access to a company facility

---

Definitions:

Supply Chain

The entire system of producing and delivering a product or service, from the supplier of raw materials to the customer.

Logistics Management

The part of supply chain management that plans, implements, and controls the efficient, effective forward and reverse flow and storage of goods, services, and related information between the point of origin and the point of consumption.

Amazon

An American multinational technology company that focuses on e-commerce, cloud computing, digital streaming, and artificial intelligence, one of the world's largest online retailers.

Fulfillment Centers

Large warehouses that process and ship orders for goods, playing a critical role in e-commerce and supply chain logistics.