Question 21

Physical penetration test was performed.

The scenario describes a penetration tester who gained access to a secured area by impersonating a legitimate vendor's engineer, which exemplifies a physical penetration test. This type of testing evaluates the security measures of a physical location by attempting to bypass them through social engineering or other tactics.

A) Physical

This option is correct as it accurately reflects the nature of the test conducted. Physical penetration tests involve evaluating how easily an unauthorized individual can gain physical access to a secure facility, which is precisely what occurred in this situation.

B) Integrated

Integrated penetration tests involve testing both physical and digital security measures, often looking at how they work together. However, since the scenario strictly focuses on gaining physical access without mention of digital systems or integration, this option is incorrect.

C) Partially known environment

A partially known environment penetration test refers to situations where the tester has some knowledge of the systems and controls in place, but not complete access. The scenario does not indicate any prior knowledge of the server room's security systems by the tester, making this option incorrect.

D) Known environment

A known environment test occurs when the tester has full knowledge of the layout, systems, and controls they are attempting to evaluate. Since the focus is solely on physical access rather than a comprehensive assessment of known systems, this option does not apply and is therefore incorrect.

Conclusion

The correct identification of a physical penetration test is confirmed by the tester's method of gaining access through impersonation. Other options do not accurately capture the essence of the scenario, which is centered on physical security rather than integrated or known environmental assessments. Thus, option A stands out as the definitive answer.