As part of an authorized physical security assessment, a tester applies light rotational pressure to a pin tumbler lock with a tension wrench while using a hook pick to manipulate each pin individually until it sets at the shear line, eventually allowing the lock to open without the original key. Which technique is being demonstrated?
- ALock bumping
- BShimming
- CBadge cloning
- DLock picking
Show answer & explanationAnswer & explanation
Correct answer: D. Lock picking
Lock picking involves manually manipulating individual pins with a pick while maintaining tension with a tension wrench until each pin reaches the shear line, allowing the plug to rotate. Lock bumping uses a specially cut bump key struck to jar pins simultaneously, shimming bypasses a latch mechanism (typically on padlocks) without manipulating pins, and badge cloning duplicates RFID credentials rather than mechanically defeating a pin tumbler lock.
Why the other options are wrong
- A. Bumping uses a bump key and impact force, not individual pin manipulation with a pick.
- B. Shimming bypasses the latch/bolt mechanism directly, not the pin stack.
- C. Badge cloning duplicates RFID/proximity credentials, unrelated to mechanical pin tumbler locks.
Lock Picking
A physical security bypass technique using a tension wrench and pick to manipulate individual pins in a pin tumbler lock until each sets at the shear line, allowing the lock to open without the correct key.
- Requires a tension wrench + pick set
- Tests physical access control effectiveness during assessments
- Different from bumping (impact-based) and shimming (latch bypass)
Memory trick: Pick pins one by one like plucking guitar strings until the tune (shear line) is right