Question

Difficulty: EasySocial Engineering and Threat Types

A technician reviews security camera footage after an unauthorized rogue device was found connected to a network switch inside a restricted server room. The footage reveals an unbadged visitor carrying a large box who closely followed an authorized administrator through a keycard-secured door before it latched closed. Which of the following social engineering threat types best describes this physical security breach?

  1. TailgatingAnswer
  2. B
    Shoulder surfing
  3. C
    Pretexting
  4. D
    Spear phishing

Answer

Tailgating
Tailgating (or piggybacking) describes an unauthorized person physically gaining entry to a locked or restricted area by closely trailing an authorized individual who opens the door.

Step-by-Step Solution

1
Analyze the physical scenario indicators
The intruder physically entered a keycard-secured room by closely following an authorized employee while carrying an item to blend in or exploit courtesy.
Identifying the medium and method of intrusion distinguishes physical social engineering attacks from digital or phone-based attacks.
2
Match the observed behavior to defined threat types
Following an authorized user through a physical access barrier before it closes is explicitly classified as tailgating.
Tailgating specifically targets physical access controls by exploiting employee courtesy or lack of awareness.

Key Concept

Tailgating (Piggybacking) Physical Social Engineering Attack
Rate this question