CompTIA A+ Core 2 (220-1202)SecurityMedium
A technician notices an unfamiliar person walk closely behind an employee through a badge-access door without swiping their own badge. Which social engineering technique does this describe?
- AWhaling
- BTailgating
- CPhishing
- DShoulder surfing
Show answer & explanationAnswer & explanation
Correct answer: B. Tailgating
Tailgating occurs when an unauthorized person follows an authorized individual through a secured entry point without proper credentials, exploiting physical access controls.
Why the other options are wrong
- A. Whaling is a targeted phishing attack aimed at high-level executives.
- C. Phishing is a digital attack using deceptive emails or messages, not physical entry.
- D. Shoulder surfing involves visually observing someone entering sensitive information, not following through a door.
Tailgating
A social engineering technique where an unauthorized individual follows an authorized person through a secured door to gain physical access without credentials.
- Also called piggybacking
- Prevented by mantraps and access-control awareness
- Exploits human courtesy (holding the door open)
Memory trick: Tailgating = sneaking in on someone's 'tail' through the door.