A penetration tester is assessing an organization's resistance to physical security attacks. They tailgate through a secured door behind an authorized employee without badging in. What type of attack does this represent?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — piggybacking, or tailgating, is correct because you follow an authorized person through a controlled door without badging in. Shoulder surfing is wrong because it captures sensitive info by watching a screen, keyboard, or PIN pad.
Full Explanation
Piggybacking/tailgating is correct because it is a physical social engineering attack where an unauthorized person enters a secured area by closely following an authorized person through an access-controlled entry point without using their own credentials, thereby bypassing physical access controls. The shoulder surfing option is wrong because it involves observing someone's screen, keyboard, or PIN pad to capture sensitive information. The dumpster diving option is wrong because it involves searching discarded materials for sensitive information; it does not involve bypassing door access controls. The lock picking option is wrong because it is a technical bypass of a mechanical lock, not a social engineering technique exploiting human behavior.