Exam PT0-002 topic 1 question 163 discussion

The ultimate goal of the pentester is to gain access to the building (a physical pentest). I don't see how a phishing email would help with that. C is the only one that makes sense in this scenario.

This is why I use brain dumps for CompTIA. Their questions are usually garbage. I have no idea if its C or D. Depends entirely on how you comprehend the question.

This is a trick question. Comptia gives you irrelevant information and then asks a question completely unrelated. In this question, you are being asked how to gain access to an IT framework without being noticed. Impersonating a delivery person will not gain you access to any network infrastructure. When was the last time you let FedEx into your server room? The only answer that makes sense in the context of the actual question being asked is D

you need access to building. sending an email phishing will no do anything, unless you're Ultron.

Based off of the "needs to access a building" part of the question, I'm going with impersonation of a delivery worker. I'm assuming instead of using the term "infrastructure" they decided to use "IT framework" instead, which can be confusing.

So how many package delivery worker do guards let in pass the front desk.. let along all the way into the server room? Been watching too many movies.. Another STUPID question from Comptia.

for God sake how can it be D. He needs physical access. answer is CCC

C. “Without being detected” is the keyword.

While the question is garbage, understanding it is important regardless. You need to access the IT framework, but you need to physically go through the building to do so as stated in the first part of the question. A phishing email won't help with this.

Those Comptia questions are real garbage. Not straightforward what the objective is. Access the building or access IT framework? Because in this case, that is the factor to know if they want C or D as an answer... C would allow you access to the building, but probably not behind locked gates and you will be on camera, but not "detected" by true means. D will assure that person wil be undetected, but will not gain physical access to the building. I think they want D as an answer, because "physical" access is not mentioned explicitly

Answer is C. Working in a secure environment and routinely getting packages teaches you to always be vigilant. My org does PenTesting 3 times a year and one of those employs the exact same scenario. Fake package or fake HVAC tech needing in to the building.

The first sentence states the penetration tester needs access to a building. No matter how many phishing e-mails you send, you will not get access to the building. This question (to me) is obvious of a physical penetration test. phishing emails - not gonna get you access to a building lock picking - nope! Cameras, and security guards Disable security cameras - nope! still have security guards The only obvious one (to me) to gain access to a building (as the question states) is to put on that uniform, a smile, and social engineer your way in

The scenario is describing a physical security environment, and the penetration tester is trying to gain access to the building. Among the provided options, the one that applies to this physical environment and allows the tester to attempt to gain access without being detected is: C. Impersonate a package delivery worker. Explanation: Option C: Impersonating a package delivery worker is a form of social engineering that could allow the tester to gain physical access to the building. By pretending to be someone who has a legitimate reason to enter the building, the tester may be able to bypass the security measures without arousing suspicion. The other options are not as suitable for the described scenario:

With questions like this it's best to ignore the first sentence. D is correct.

Unbeliavable.... C.... Really? The question is so obviously trying to make the point that attempting physical access isn't a good idea. What's the odd one out? The remotely sent phishing email. This question is the equivalent of "3 Yes' and 1 no"

This is D. Of Course its D

C of course