Which term describes the act of an attacker exploiting a false association with another person who has legitimate access to the area?

Which term describes the act of an attacker exploiting a false association with another person who has legitimate access to the area?

• A. Draw Request
• B. Agent (re: Conflict of Interest)
• C. Non-Competition Agreement
• D. Piggybacking to Get Access to an Area

Answer: (D)

Piggybacking to get access to an area is a physical security breach where an attacker exploits someone who already has legitimate entry. The attacker follows closely behind a rightful user or uses the appearance of a shared affiliation to slip through an access point, effectively bypassing authentication without possessing their own credentials. This relies on social trust and weak access discipline, making it a common risk in many facilities. The other terms don’t describe this scenario. A Draw Request relates to financial or accounting processes, not entry control. An Agent (re: Conflict of Interest) concerns fiduciary or business relationships, not gaining physical access. A Non-Competition Agreement is a contract about post-employment restrictions, not security entry.

Piggybacking to get access to an area is a physical security breach where an attacker exploits someone who already has legitimate entry. The attacker follows closely behind a rightful user or uses the appearance of a shared affiliation to slip through an access point, effectively bypassing authentication without possessing their own credentials. This relies on social trust and weak access discipline, making it a common risk in many facilities.

The other terms don’t describe this scenario. A Draw Request relates to financial or accounting processes, not entry control. An Agent (re: Conflict of Interest) concerns fiduciary or business relationships, not gaining physical access. A Non-Competition Agreement is a contract about post-employment restrictions, not security entry.