WorksheetsAP Cybersecurity: Unit 02 Practice Test
Total questions: 22
Worksheet time: 12mins
Which attack involves an adversary following closely behind an authorized person without their knowledge to gain access to a restricted area?
Tailgating
Piggybacking
Shoulder surfing
Dumpster diving
Which attack involves convincing an authorized person to allow access to a restricted area, often by pretending to be someone who needs help or maintenance?
Piggybacking
Tailgating
Card cloning
Shoulder surfing
Which attack involves observing someone entering sensitive information, sometimes using cameras to record the process?
Shoulder surfing
Dumpster diving
Piggybacking
Card cloning
Which attack involves searching through discarded physical materials to find sensitive information?
Dumpster diving
Shoulder surfing
Tailgating
Card cloning
Which attack involves creating a copy of an access card to gain entry to restricted resources?
Card cloning
Piggybacking
Dumpster diving
Shoulder surfing
Which of the following is an example of a natural threat to cybersecurity?
Earthquake
Piggybacking
Card cloning
Shoulder surfing
What is the primary impact of cutting power to a device?
The device and its services become unavailable
Sensitive data is automatically encrypted
The device switches to a backup generator
The device locks all ports
What can adversaries do if they gain physical access to a device and its ports?
Install a keylogger or malware via external drive
Automatically bypass encryption
Trigger a natural disaster
Disable surge protection
Which scenario represents a high risk from physical vulnerabilities?
Sensitive systems exposed without restricted access
A noncritical area left unprotected
A low-value asset unlikely to be exploited
A locked server room with cameras
Which scenario represents a moderate risk?
A noncritical area that could serve as a foothold for attackers
Sensitive systems exposed without restricted access
A low-value asset unlikely to be exploited
A workstation with a privacy screen
Which scenario represents a low risk?
An asset of low value with minimal likelihood of exploitation
Sensitive systems exposed without restricted access
A noncritical area left unprotected
A server room without locks
Which of the following is a key goal of employee security awareness training?
Detecting social engineering attempts
Writing secure code
Configuring firewalls
Performing penetration tests
Which workstation security measure helps prevent unauthorized viewing of sensitive information?
Using a privacy screen filter
Keeping food and drink off the desk
Connecting to a surge protector
Locking the laptop with a cable
What is the purpose of a clean-desk policy?
Remove sensitive paper documents when leaving the workstation
Ensure all devices are encrypted
Disable unused USB ports
Require employees to badge in and out
What is the purpose of installing fencing around a building?
Deter adversaries from accessing the building
Prevent malware infections
Encrypt sensitive data
Reduce phishing attempts
What does an uninterruptible power supply (UPS) provide?
Backup power during outages
Surge protection only
Physical access control
Motion detection
Which control prevents unauthorized USB devices from loading malware?
Disabling USB ports
Installing fencing
Using privacy screens
Deploying motion sensors
What is the function of card readers in physical security?
Record badge usage and deny unauthorized access
Encrypt sensitive data
Detect motion in restricted areas
Provide backup power during outages
Why should camera feeds be recorded and monitored?
To provide evidence for investigations after incidents
To prevent phishing attacks
To encrypt sensitive data
To block malware from USB drives
Where should motion sensors be placed for maximum effectiveness?
Areas with unexpected traffic like server rooms
High-traffic areas like lobbies
Employee break rooms
Parking lots only
Why are patrolling security guards considered effective?
They create time pressure and are harder for adversaries to plan around
They provide backup power during outages
They encrypt sensitive data
They prevent phishing emails
Place the physical security controls in the place they make the most sense. (Note, these are not the only controls placed in the building).
