AP Cybersecurity: Topic 2.1 - Practice Quiz

An individual in a high-visibility vest, claiming to be a fire inspector, shows up at an office unannounced and demands access to the server room for an "urgent safety check." The employee, intimidated, lets them in. This is a clear case of:

• Tailgating

• Piggybacking

• Shoulder surfing

• Dumpster diving

At a crowded airport charging station, a person plugs their phone in next to yours. You then enter your work laptop's complex password. Later, you learn the person had a small, high-resolution camera zoomed in on your keyboard from their seat. This is:

• Card cloning

• Social engineering

• Shoulder surfing

• Piggybacking

A data center's operations are suddenly halted when a nearby river overflows its banks after a week of heavy rain, flooding the ground floor and destroying equipment. This is classified as:

• A power disruption attack

• A social engineering attack

• A physical access vulnerability

• A natural threat

An attacker finds a shredded, but poorly cross-cut, document in an office's recycling bin. By reassembling it, they discover a list of internal employee email addresses and phone numbers, which they later use for phishing. This attack is:

• Shoulder surfing

• Dumpster diving

• Tailgating

• Card cloning

An employee leaves their building access card on their desk while they go to a meeting. A coworker with malicious intent briefly takes the card, swipes it through a small, portable device in their pocket, and then returns it. The device creates a perfect copy of the card's data. This is:

• Card cloning

• Piggybacking

• Social engineering

• Device destruction

An attacker gains access to an electrical room in an office building and physically cuts the labeled network cables leading to the company's main file server, causing a complete service outage. This is a form of:

• Device destruction

• Power disruption

• A natural threat

• Tailgating

A user is typing their password at a public computer in a library. An attacker, standing several feet behind them, simply watches their keystrokes to memorize the password. This is a low-tech version of:

• Shoulder surfing

• Piggybacking

• Tailgating

• Social engineering

An attacker wants to shut down a small business's security camera system. They locate the exterior electrical panel and pull the fuses connected to the security office. This is an example of:

• A natural threat

• Dumpster diving

• A power disruption attack

• Card cloning

An unauthorized person, posing as a job applicant, is left alone in a conference room. They notice a laptop on the table, lift it, and see a sticky note on the bottom with the user's login password. They quickly take a photo of it. This is a risk associated with:

• Gaining access to an area with sensitive information

• A natural threat

• A power disruption

• Card cloning

An employee walks through a secure turnstile using their badge. An attacker, waiting just on the other side, grabs the turnstile before it locks and pushes through behind them. The employee is wearing headphones and doesn't notice. This is:

• Piggybacking

• Shoulder surfing

• Tailgating

• Social engineering