Ethical Hacking Essentials Practice Test

Which attack technique would involve spoofing an ID to gain unauthorized access to a secure location?

1. Tailgating

2. Vishing

3. Social engineering

4. Phishing

The correct answer is: Tailgating

Tailgating is a physical security breach technique where an unauthorized individual follows an authorized person into a restricted area. This often involves mimicking the authorized user’s behavior, which could include spoofing an ID, to gain access to secure locations. The technique relies on the trust that authorized personnel may inadvertently place in that individual, allowing them to enter areas without proper clearance. This method of attack exploits human trust and the often lax enforcement of physical access controls, making it particularly effective in environments where employees are accustomed to holding doors open for others. By entering behind a legitimate credential holder, the attacker can bypass security measures that would otherwise prevent unauthorized access. In contrast, the other techniques listed—such as vishing, social engineering, and phishing—are primarily focused on digital or psychological manipulation rather than physical entry. Vishing relates to voice phishing targeting individuals over the phone; social engineering encompasses a broader range of manipulative tactics to deceive individuals; and phishing typically involves deceitful emails or messages aimed at acquiring sensitive information. While these methods can certainly be part of an overall security threat, they do not specifically involve the physical act of gaining unauthorized access to secure areas through spoofing an ID.