220-802 · Question #314
Which of the following BEST describes the security term known as tailgating?
The correct answer is B. Following behind someone when entering a secure area. Tailgating is a physical social engineering attack where an unauthorized person gains entry to a secure area by following closely behind an authorized person.
Question
Which of the following BEST describes the security term known as tailgating?
Options
- APropping open a secure entrance to gain later access
- BFollowing behind someone when entering a secure area
- CRemoving files from a site using a hidden USB drive
- DUsing someone else's logged in computer to access files
How the community answered
(33 responses)- A3% (1)
- B94% (31)
- C3% (1)
Why each option
Tailgating is a physical social engineering attack where an unauthorized person gains entry to a secure area by following closely behind an authorized person.
Propping open a secured entrance is a separate physical security violation sometimes called 'door propping,' not tailgating.
Tailgating, also called piggybacking, specifically describes the act of an unauthorized individual closely following an authorized person through a secured entrance - such as a badge-controlled door - without presenting their own credentials. The attacker exploits social courtesy or inattention to bypass physical access controls. This is a well-defined physical security threat covered in CompTIA Security+ and similar certifications.
Removing files via a hidden USB drive describes data exfiltration, a completely different type of insider or physical threat.
Using another person's already-logged-in computer describes unauthorized access or session hijacking, not a physical entry attack.
Concept tested: Physical security - tailgating social engineering attack
Source: https://www.cisa.gov/topics/physical-security
Topics
Community Discussion
No community discussion yet for this question.