A penetration tester was hired to perform a physical security assessment of an organization's office. After monitoring the environment for a few hours, the penetration tester notices that some…

Tailgating involves following an authorized person through an access point, but the scenario of unattended belongings doesn't directly facilitate this technique.

Dumpster diving is a technique for information gathering from discarded materials, not for directly gaining physical access into a building with a 'legitimate' appearance.

Shoulder surfing is observing sensitive information like PINs or passwords, which may lead to system access but not directly to gaining 'legitimate access' through a physical entry point.

If employees leave their access badges unattended with their belongings, a penetration tester can opportunistically access these badges to clone them. A cloned badge would then allow the tester to gain seemingly legitimate access to the building without raising immediate suspicion.