A small company shares a multi-tenant office building. The server room door uses a keypad lock, but employees frequently hold the door open for colleagues who forgot their codes. The company wants to reduce the risk of unauthorized entry without adding a receptionist. Which control is most effective?

Add a CCTV camera above the door and review footage weekly.

Install a mantraps with interlocking doors and require badge authentication.

Change the keypad code monthly and share it only with staff.

Post a sign reminding employees not to hold the door open for others.

A company has a policy that all visitors must be escorted. However, a contractor who visits frequently is often allowed to walk unescorted because employees recognize them. The contractor is later found to have stolen confidential documents. Which control would have most likely prevented this?

Enforce the escort policy consistently for all visitors, including frequent contractors.

Add CCTV cameras in all document storage areas.

Issue the contractor a temporary badge that expires daily.

Conduct a background check on the contractor before hiring.

A company's server room is protected by a PIN pad. An employee notices that the keypad numbers are worn, revealing the digits most frequently pressed. The company wants to improve security without replacing the hardware. Which control is most effective?

Add a privacy shield around the keypad to block shoulder surfing.

Post a sign reminding employees to cover the keypad when entering the PIN.

Implement a policy that requires employees to clean the keypad after each use and change the PIN monthly.

Use a longer PIN (8 digits instead of 4) to make guessing harder.

A hospital wants to protect its medication storage room, which contains controlled substances. The room is accessed by nurses, pharmacists, and cleaning staff. The hospital needs to ensure that only authorized personnel enter, but also needs to maintain an audit trail of who entered and when. Which combination of controls best meets these requirements?

Electronic lock with individual PINs and an access log that records each entry.

A shared keypad code for all staff and a CCTV camera outside the room.

A physical key that is kept in a lockbox at the nurses' station.

A biometric fingerprint reader with no logging capability.

EC-CouncilNetwork Defense Essentials

Domain 2Objective 4

Physical Security Concepts and Attack Vectors NDE Practice Questions (Page 3)

Part of the Administrative and Physical Security Controls domain, which makes up ~15% of our current practice bank.

28questions here

6free pages

2concepts

Questions 11–15

11application · easy
A disgruntled employee who was just terminated uses their still-active badge to enter the data center and cuts several network cables. Which physical attack vector is demonstrated?
Select an answer first
12application · medium
A small company shares a multi-tenant office building. The server room door uses a keypad lock, but employees frequently hold the door open for colleagues who forgot their codes. The company wants to reduce the risk of unauthorized entry without adding a receptionist. Which control is most effective?
Select an answer first
13expert · hard
A company has a policy that all visitors must be escorted. However, a contractor who visits frequently is often allowed to walk unescorted because employees recognize them. The contractor is later found to have stolen confidential documents. Which control would have most likely prevented this?
Select an answer first
14expert · hard
A company's server room is protected by a PIN pad. An employee notices that the keypad numbers are worn, revealing the digits most frequently pressed. The company wants to improve security without replacing the hardware. Which control is most effective?
Select an answer first
15expert · hard
A hospital wants to protect its medication storage room, which contains controlled substances. The room is accessed by nurses, pharmacists, and cleaning staff. The hospital needs to ensure that only authorized personnel enter, but also needs to maintain an audit trail of who entered and when. Which combination of controls best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Physical Security Concepts and Attack Vectors NDE Practice Questions (Page 3)

Questions 11–15

A disgruntled employee who was just terminated uses their still-active badge to enter the data center and cuts several network cables. Which physical attack vector is demonstrated?

A company has a policy that all visitors must be escorted. However, a contractor who visits frequently is often allowed to walk unescorted because employees recognize them. The contractor is later found to have stolen confidential documents. Which control would have most likely prevented this?

A company's server room is protected by a PIN pad. An employee notices that the keypad numbers are worn, revealing the digits most frequently pressed. The company wants to improve security without replacing the hardware. Which control is most effective?

Keep studying — Administrative and Physical Security Controls