A parks department physical social-engineering test checks access to badge-only maintenance areas. What surface is primarily under test?
Select an answer to reveal the explanation.
Short Explanation
Can a polite stranger ride someone else's badge swipe into the shop? That is physical SE—doors and habits—not TLS settings or database keys.
Full Explanation
A parks department physical social-engineering test against badge-only maintenance areas is primarily testing whether visitors can tailgate into those spaces. The surface under test is physical access control plus human door discipline—can an unauthorized person ride a legitimate badge swipe or courtesy hold-open into the shop? Results inform door hardware, anti-tailgate policy, staff coaching, and visitor escort rules for parks facilities.
Whether TLS 1.0 is enabled on the parks public website is a cryptographic/web-hardening question, not the physical SE surface described. Whether the CMDB schema uses UUID primary keys is an asset-data modeling concern unrelated to badge-door behavior. Whether SIEM retention is set to ninety days is a logging-operations setting, not physical tailgating resistance.
Exam caveat: match the control domain to the stem. Physical SE items are about people and doors; do not drag in TLS, CMDB, or SIEM distractors.
Operational check: define success/fail for tailgate attempts in ROE, use observers or cameras where authorized, debrief staff without public shaming, and track corrective actions (signage, turnstiles, escort policy) separately from unrelated IT hygiene metrics.