Chapter 44 · Quiz

Physical Attacks Quiz

Seven questions covering brute force entry, RFID cloning, MFA defenses, environmental attacks, and why physical access defeats digital security.

Q1. A security consultant is riding a crowded subway with a device that fits in their jacket pocket. Without touching anyone, they capture data from three employees' access badges and copy each onto a blank card. Each copy takes about 20 seconds. The device was purchased online for $40. Which attack type does this describe?

A. Tailgating — following employees through secured doors to gain access B. RFID cloning — wirelessly reading and duplicating an access badge to create a functional copy C. A man-in-the-middle attack on the badge reader's wireless communication D. Social engineering — convincing employees to share their access credentials

Q2. A physical penetration tester is assessing a server room with a high-quality electronic lock. She discovers that the door frame is standard construction with two screws holding the strike plate. She tests gentle lateral pressure and notes there is significant flex in the frame. Which physical attack type does this door installation fail to defend against?

A. RFID cloning — the lock hardware may be defeated by a cloned badge B. Tailgating — someone could follow an authorized employee through before the door closes C. Physical brute force — force applied to the door would likely cause the frame to fail rather than the lock hardware D. Environmental attack — the door does not protect the HVAC systems feeding the server room

Q3. An attacker does not attempt to enter the server room. Instead, they access an unsecured utility room on the same floor and disable the circuit breakers feeding the data center's cooling units. Thirty minutes later, servers begin automated thermal shutdowns. Which attack type does this describe?

A. Physical brute force — the attacker forced entry through the utility room door B. Environmental attack — targeting the HVAC infrastructure that the servers depend on rather than the servers directly C. A network-layer denial of service targeting the data center's management systems D. A logic bomb — the thermal shutdowns were pre-programmed to occur at a specific time

Q4. An organization uses RFID access badges as the sole credential for entering all secured areas. A security audit identifies RFID cloning as a critical risk. Which control BEST addresses this specific risk?

A. Implementing multi-factor authentication at access readers — requiring the badge plus a PIN or biometric scan B. Encrypting the data stored on the RFID badge so that a cloned copy cannot be read C. Replacing RFID cards with magnetic stripe cards that require physical contact with the reader D. Installing a shielded sleeve requirement — all employees must keep badges in RFID-blocking sleeves at all times

Q5. An attacker triggers a data center's fire suppression system by holding a smoke source near a detector outside the server room door. The suppression system activates, causing an emergency shutdown of all systems. No server room access was achieved. Which attack category does this best illustrate?

A. Physical brute force — the attacker forced the suppression system to activate B. RFID cloning — the suppression system access was duplicated from a valid credential C. Environmental attack — the fire suppression system is supporting infrastructure; triggering it causes a data center denial of service without accessing a single server D. A network-based attack on the building management system that controls suppression

Q6. A server runs a hardened operating system with full-disk encryption, multi-factor OS login, and tamper detection software. An attacker gains physical access and connects the storage drive to their own laptop. Which statement BEST explains why the server's software defenses do not protect against this?

A. Full-disk encryption keys are stored on the drive itself and are readable when the drive is removed B. Operating system security controls are only active when the OS is running on its native hardware — removing the drive bypasses the OS entirely; the attacker works directly against the hardware layer C. The tamper detection software should have sent a remote alert, but that alert was blocked by a network failure D. Full-disk encryption does not cover data in the system's RAM cache, which persists after removal

Q7. Match each physical attack or control to its correct description.

Click each term on the left, then click its match on the right.

Match each item on the left with its correct description on the right:

Brute Force (Physical)

RFID Cloning

HVAC Attack

MFA (Physical Access)

A. Requires a second factor (PIN or biometric) alongside the access card, defeating duplication of the card alone

B. Disabling cooling systems to cause server overheating and automatic thermal shutdown without entering the server room

C. Overcoming a physical barrier through direct force — targeting the weakest point in the perimeter, often the frame rather than the lock

D. Reading a legitimate access badge wirelessly with a sub-$50 device and copying its data to a blank card in seconds

Click an item on the left to select it, then click its match on the right.