SY0-501 Question #544: Real Exam Question with Answer & Explanation

Question

A security auditor is testing perimeter security in a building that is protected by badge readers. Which of the following types of attacks would MOST likely gain access?

Options

• APhishing
• BMan-in-the-middle
• CTailgating
• DWatering hole
• EShoulder surfing

Explanation

Tailgating is the most likely physical security attack to gain unauthorized access to a building protected by badge readers, as it directly circumvents the physical access control mechanism.

Common mistakes.

• A. Phishing is a social engineering attack conducted digitally to steal credentials or information, not a method for physical entry past a badge reader.
• B. Man-in-the-middle is a network attack that intercepts and modifies communication between two parties, irrelevant to gaining physical access through a badge reader.
• D. Watering hole is a web-based attack to infect users with malware by compromising frequently visited websites, unrelated to gaining physical building access.
• E. Shoulder surfing involves observing confidential information (like a PIN or password) by looking over someone's shoulder, which doesn't directly facilitate bypassing a badge reader to gain physical access.

Concept tested. Physical security bypass via social engineering

No community discussion yet for this question.