Guide: Tailgating in CompTIA Security Plus
Importance:
Tailgating, also known as 'piggybacking', is a critical security concern in both physical and cyber security environments. Understanding this concept is crucial as it exposes the susceptibility of organizations to simple yet effective unauthorized entry tactics, both physically and electronically.
Definition:
Tailgating involves an unauthorized individual following an authorized individual into a restricted area or system. In the context of cyber security, it could also refer to an unapproved entity gaining access to restricted network zones by following an approved entity.
Working:
Tailgating works on the premise of exploiting the human element of security. It involves techniques like social manipulation, deceit or simply waiting for an opportunity to follow someone into a secure area or system. In the cyber context, tailgating could involve strategies like email phishing where the attacker tricks a user into revealing their login credentials.
Exam Tips: Answering Questions on Tailgating:
When addressing exam questions on tailgating:
- Understand the definition and working of tailgating in both physical and cyber contexts.
- Recognize its implications on overall system security.
- Understand preventive measures like enforcing strict entry protocols, periodic security training and sensitive information handling policies.