A Penetration Tester Has Been Contracted to Conduct a Physical

question 107

Multiple Choice

A penetration tester has been contracted to conduct a physical assessment of a site. Which of the following is the MOST plausible method of social engineering to be conducted during this engagement?

• A) Randomly calling customer employees and posing as a help desk technician requiring user password to resolve issues
• B) Posing as a copier service technician and indicating the equipment had "phoned home" to alert the technician for a service call
• C) Simulating an illness while at a client location for a sales call and then recovering once listening devices are installed
• D) Obtaining fake government credentials and impersonating law enforcement to gain access to a company facility

---

Definitions:

Push Polls

A type of poll that is designed to influence or alter the view of respondents under the guise of conducting an opinion poll.

Misleading Information

False or inaccurate information that is presented to deceive or misguide.

Representative

An individual elected to act and speak on behalf of others, typically in a legislative body.

Demographic Traits

Characteristics used to describe and categorize populations, such as age, gender, ethnicity, and income.