nerdexam
EC-Council

312-50V10 · Question #584

A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and

The correct answer is B. Tailgating. The consultant physically followed an authorized employee through a secured access point without presenting credentials, which is the definition of tailgating.

Social Engineering

Question

A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

Options

  • AMan trap
  • BTailgating
  • CShoulder surfing
  • DSocial engineering

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    85% (23)
  • C
    4% (1)
  • D
    7% (2)

Why each option

The consultant physically followed an authorized employee through a secured access point without presenting credentials, which is the definition of tailgating.

AMan trap

A man trap is a physical security countermeasure consisting of a small room with two interlocked doors, not an attack technique performed by an intruder.

BTailgatingCorrect

Tailgating is a physical intrusion technique where an unauthorized person gains access to a restricted area by closely following an authorized individual through a secured entry point. The consultant exploited the natural human tendency to hold doors open or allow others to pass, bypassing the access control entirely. No deception of identity or credentials was required - only physical proximity to an authorized user.

CShoulder surfing

Shoulder surfing involves observing someone's screen, keyboard, or PIN entry to steal information, not physically following someone through a door.

DSocial engineering

Social engineering is a broad category of manipulation-based attacks; tailgating is the specific physical technique used here, making B the more precise and correct answer.

Concept tested: Physical security - tailgating access control bypass

Source: https://csrc.nist.gov/glossary/term/tailgating

Topics

#tailgating#physical security#access control#penetration testing

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice