nerdexam
EC-Council

312-50V9 · Question #293

Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs…

The correct answer is C. Tailgating. Tailgating is a physical social engineering technique where an attacker gains access to a restricted area by following closely behind an authorized person as they enter.

Social Engineering

Question

Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still on the phone, grabs the door as it begins to close. What just happened?

Options

  • APhishing
  • BWhaling
  • CTailgating
  • DMasquerading

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    88% (30)
  • D
    3% (1)

Why each option

Tailgating is a physical social engineering technique where an attacker gains access to a restricted area by following closely behind an authorized person as they enter.

APhishing

Phishing is a digital attack that uses deceptive emails or messages to trick users into revealing credentials or clicking malicious links, not a physical intrusion technique.

BWhaling

Whaling is a form of spear phishing that specifically targets high-value individuals such as executives, conducted through electronic communication rather than physical access.

CTailgatingCorrect

Tailgating specifically describes the act of physically following an authorized individual through a secured access point - such as a badge-reader door - without using one's own credentials. Jimmy exploited the natural human tendency to hold doors open by using a distraction (fake phone call) to appear preoccupied and non-threatening while slipping through the closing door.

DMasquerading

Masquerading involves impersonating another user or system identity - typically digitally - by using stolen credentials or tokens, not by physically following someone through a door.

Concept tested: Physical social engineering - tailgating attack

Source: https://www.cisa.gov/topics/physical-security

Topics

#tailgating#physical security#social engineering#unauthorized access

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice