An unauthorized person follows an employee through a secure door without scanning their own badge. What is this physical security attack called?
- A.A. Shoulder surfing
- B.C. Dumpster diving
- C.B. Tailgating (piggybacking)
- D.D. Vishing
Why C is correct
Tailgating (or piggybacking) is a physical social engineering attack where an unauthorized person follows an authorized person through a secured entrance. Countermeasures include mantraps/airlocks, security awareness training, turnstiles, and policies requiring badge scanning for every entry.
Know someone studying for Security Fundamentals? Send them this one.