312-50V11 · Question #100
An unauthorized individual enters a building following an employee through the employee entrance after the lunch rush. What type of breach has the individual just performed?
The correct answer is B. Tailgating. The attacker followed an authorized employee through a secured entrance without the employee's knowledge or consent, which is the definition of tailgating.
Question
An unauthorized individual enters a building following an employee through the employee entrance after the lunch rush. What type of breach has the individual just performed?
Options
- AReverse Social Engineering
- BTailgating
- CPiggybacking
- DAnnounced
How the community answered
(49 responses)- A2% (1)
- B94% (46)
- C4% (2)
Why each option
The attacker followed an authorized employee through a secured entrance without the employee's knowledge or consent, which is the definition of tailgating.
Reverse social engineering involves the attacker positioning themselves as an authority or helper so the victim initiates contact with them, not unauthorized physical entry by following someone.
Tailgating occurs when an unauthorized individual gains physical access to a restricted area by closely following an authorized person through a secured entry point without that person's awareness or approval. Unlike piggybacking, the authorized employee does not knowingly allow or assist the intruder. This is a classic physical social engineering attack exploited during high-traffic periods like lunch rushes.
Piggybacking is similar but requires the authorized employee to be aware of and knowingly allow the unauthorized individual to enter, which is not described in this scenario.
Announced is not a recognized social engineering or physical security breach technique in standard IT security frameworks.
Concept tested: Physical security - tailgating vs piggybacking
Source: https://www.cisa.gov/sites/default/files/publications/CISA_Insights_Physical_Security_Measures_508.pdf
Topics
Community Discussion
No community discussion yet for this question.