A penetration tester is assessing an organization's resistance to physical security attacks. They tailgate through a secured door behind an authorized employee without badging in. What type of attack does this represent?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because tailgating (or piggybacking) is a physical security attack where an unauthorized person enters a secured area by closely following an authorized person through an access-controlled entry point without using their own credentials. A is wrong because shoulder surfing involves observing someone's screen, keyboard, or PIN pad to capture sensitive information.
Full explanation below image
Full Explanation
B is correct because tailgating (or piggybacking) is a physical security attack where an unauthorized person enters a secured area by closely following an authorized person through an access-controlled entry point without using their own credentials. A is wrong because shoulder surfing involves observing someone's screen, keyboard, or PIN pad to capture sensitive information. C is wrong because dumpster diving involves searching discarded materials for sensitive information; it does not involve bypassing door access controls. D is wrong because lock picking is a technical bypass of a mechanical lock, not a social engineering technique exploiting human behavior.