A person in a delivery uniform carrying a large box approaches a secure entrance and asks an employee who is entering to hold the door for them. The employee, wanting to be helpful, holds the door. This is an example of:
An employee swipes their access card to enter a restricted area. An unknown person, who was standing nearby talking on their phone, quickly walks in right behind the employee before the door closes, without swiping any card. This attack is known as:
While waiting in line at a coffee shop, you notice the person behind you seems to be looking at your phone screen as you type in your banking password. This person could be attempting:
A corporate spy wants to find information about a competitor's upcoming product launch. They wait until after business hours and go through the trash bins outside the competitor's office, finding printouts of sales projections and marketing drafts. This attack is:
An attacker calls an employee, pretending to be from the IT department. The attacker claims there is an urgent server issue and manipulates the employee into revealing their network password to "help fix the problem." This is a form of:
An employee uses their access card at a building entrance. Unknown to them, an attacker has placed a hidden device over the card reader that secretly copies the card's data. The attacker later uses this data to create a duplicate card. This attack is called:
A data center located in a coastal region is forced to shut down all operations due to a severe hurricane causing massive flooding and power outages. This is an example of a:
An adversary wants to disable a company's critical server. They gain access to the building's utility closet and intentionally flip the main circuit breaker for the server room, cutting all electricity to the equipment. This is a:
An unauthorized person gains access to a file room containing sensitive employee records. They take photos of several personnel files before leaving unnoticed. This vulnerability has led to:
An attacker, posing as a cleaning crew member, gets into an office after hours. They plug a small, disguised USB drive into the back of a manager's computer. The drive automatically installs malware. This is possible because the adversary gained:
During a break-in, a disgruntled former employee smashes several servers with a hammer, making them completely inoperable. This action results in the data and services on those servers becoming:
A company has strong firewalls and a secure network. However, an attacker simply walks into an unlocked server room and unplugs the main router. This highlights that:
A hospital leaves the door to its server room, which contains all patient medical records, propped open and unattended. This situation would be classified as a:
A company's public-facing cafeteria has an unsecured Wi-Fi network. An attacker could potentially use this network to gain a "foothold" into the main corporate network, even though the cafeteria network itself isn't critical. This is a:
An office leaves a stack of old, blank printer paper in an unlocked supply closet that is accessible to employees. This is a:
A person calls out to an employee who is about to enter a secure area, "Hold the door! I forgot my badge at my desk!" The employee believes them and holds the door. This is an example of:
An attacker sets up a small camera hidden in a ceiling tile overlooking an ATM's keypad to record users entering their PINs. This is a form of:
After gaining access to an office, an attacker disconnects the keyboard from a computer, inserts a small device between the keyboard and the PC, and reconnects the keyboard. This device secretly records every keystroke. This is an example of:
A financial services firm keeps backup tapes containing all client transaction data in an unlocked filing cabinet in a hallway. Why is this a high-risk physical vulnerability?
An activist group wants to protest a company by taking its website offline. They access an external electrical box for the building and cut the main power cables. This is an attack on: