CompTIA Security+ Question D-18

Emily, an attacker, is recording a person typing in their ID number into a keypad to gain access to the building. Emily then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occurred LAST?

A. Phishing
B. Shoulder surfing
C. Impersonation
D. Tailgating

Answer: C

Explanation:
Two attacks took place in this question. The first attack was shoulder surfing. This was the act of Emily recording a person typing in their ID number into a keypad to gain access to the building. The second attack was impersonation. Emily called the helpdesk and used the PIN to impersonate the person she recorded.