A penetration tester approaches a company employee in the smoking area and starts a conversation about the company's recent social event. After a few minutes, the employee holds the badge- protected…

The correct answer is D. Tailgating. Tailgating (also called piggybacking) is a physical social engineering attack in which an unauthorized person follows an authorized employee through a secured, access-controlled entry point without using their own credentials. The tester used casual conversation about a social…

Attacks and Exploits

Question

A penetration tester approaches a company employee in the smoking area and starts a conversation about the company's recent social event. After a few minutes, the employee holds the badge- protected door open for the penetration tester and both enter the company's building. Which of the following attacks did the penetration tester perform?

Options

ADumpster diving
BPhishing
CBadge cloning
DTailgating

How the community answered

(16 responses)

C
6% (1)
D
94% (15)

Explanation

Tailgating (also called piggybacking) is a physical social engineering attack in which an unauthorized person follows an authorized employee through a secured, access-controlled entry point without using their own credentials. The tester used casual conversation about a social event to build rapport and appear trustworthy, causing the employee to instinctively hold the door - a common social courtesy that bypasses physical security controls. Dumpster diving (A) involves searching discarded materials for sensitive information. Phishing (B) is an electronic deception attack. Badge cloning (C) would involve duplicating an RFID/NFC credential to gain independent access, which did not occur here.

Topics

#Tailgating#Social Engineering#Physical Security#Access Control Bypass

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice