312-50V9 · Question #293
Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs…
The correct answer is C. Tailgating. Tailgating is a physical social engineering technique where an attacker gains access to a restricted area by following closely behind an authorized person as they enter.
Question
Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close. What just happened?
Options
- APhishing
- BWhaling
- CTailgating
- DMasquerading
How the community answered
(34 responses)- A6% (2)
- B3% (1)
- C88% (30)
- D3% (1)
Why each option
Tailgating is a physical social engineering technique where an attacker gains access to a restricted area by following closely behind an authorized person as they enter.
Phishing is a digital attack that uses deceptive emails or messages to trick users into revealing credentials or clicking malicious links, not a physical intrusion technique.
Whaling is a form of spear phishing that specifically targets high-value individuals such as executives, conducted through electronic communication rather than physical access.
Tailgating specifically describes the act of physically following an authorized individual through a secured access point - such as a badge-reader door - without using one's own credentials. Jimmy exploited the natural human tendency to hold doors open by using a distraction (fake phone call) to appear preoccupied and non-threatening while slipping through the closing door.
Masquerading involves impersonating another user or system identity - typically digitally - by using stolen credentials or tokens, not by physically following someone through a door.
Concept tested: Physical social engineering - tailgating attack
Source: https://www.cisa.gov/topics/physical-security
Topics
Community Discussion
No community discussion yet for this question.