A penetration tester is conducting a physical test against an organization. During the first day of the assessment, the tester follows an employee to the coffee shop next door. While the employee is…

Tailgating is physically following an authorized person through a secure entry point without using legitimate credentials, which is a physical access method, not an electronic exploit of a badge.

Bluesnarfing is the unauthorized access to information from a Bluetooth-enabled device, which is not what is described when electronically capturing badge information.

RFID cloning involves using a reader to capture the unique identifier and other data from an RFID-enabled badge from a close proximity without physical contact. This data can then be copied to a blank RFID card, allowing the attacker to impersonate the legitimate badge holder and gain unauthorized access to physical locations.

Session hijacking is exploiting a valid computer session to gain unauthorized access to information or services, which is a network-based attack, not a physical badge exploit.