CEH Practice Question: Malware, Social Engineering and Network Attacks

An attacker gains physical access to a building by following an authorized employee through a secure door without using a badge. Which social engineering technique is being used?

⚠ Common exam trap

Many exam-takers confuse tailgating with pretexting, as both involve deception, but tailgating is specifically about physical proximity and following someone through a secured entry point without authentication.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Tailgating

Tailgating (also known as piggybacking) is a physical social engineering attack where an unauthorized person follows an authorized individual into a restricted area without presenting their own credentials. The attacker exploits the authorized person's trust or politeness to bypass access control systems such as badge readers or biometric locks. This technique relies on the human factor rather than technical vulnerabilities.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Pretexting
Why it's wrong here
Pretexting involves fabricating a scenario to obtain information.
✓
Tailgating
Why this is correct
Tailgating is physically following someone through a secure entrance.
✗
Baiting
Why it's wrong here
Baiting uses physical media left in tempting locations.
✗
Quid pro quo
Why it's wrong here
Quid pro quo offers a service in exchange for information.

Go deeper

CEH Practice Question: Malware, Social Engineering and Network Attacks

Why each option matters

Option-by-option breakdown

Related to this question