What is the primary purpose of conducting a site survey in a physical security pentest?

• A. To install new security cameras.
• B. To evaluate the effectiveness of perimeter security measures and identify vulnerabilities.
• C. To test internal network throughput.
• D. To train staff on security procedures.

Answer: (B)

The main idea behind a site survey in a physical security pentest is to understand how well the current perimeter and entry controls hold up and where an attacker could bypass them. By examining the layout, access points, lighting, cameras, alarms, guards, barriers, and existing procedures, the tester catalogs what protections exist and identifies gaps or weaknesses such as blind spots, easy entry points, or risky workflows like tailgating. This information helps plan the actual testing and provides concrete findings and recommendations to strengthen security. It’s not about installing cameras, testing network performance, or training staff—that would be separate activities outside the survey’s primary purpose of evaluating the effectiveness of perimeter protections and revealing vulnerabilities.