Best Physical Access Attack Against a Guarded Vestibule
Short answer
B Tailgate behind an authorized employee during peak traffic so the vestibule and guard observe a legitimate access event instead of a cloned badge, picked lock, or impersonated employee.
Question
Key Takeaways
The item tests whether you pick the lowest-risk physical entry that leverages an authorized person's valid access; the trap is treating badge cloning or impersonation as sufficient when the vestibule and guard still stand between the tester and the office.
In a multi-tenant office protected by an access control vestibule and on-site guards, the best physical access plan is tailgating during a busy period (B), not badge cloning, lock picking, or employee impersonation.
Common mistake: A common wrong choice is D, impersonating an employee; it may support a pretext, but it does not bypass the vestibule or guard because the tester still lacks a valid credential and faces closer scrutiny.
Expert Analysis
The access path, not the front door alone The building is multi-tenant, so the tester can legitimately stand in public areas and observe staff traffic, but the secured entry is protected by two layers: an access control vestibule (mantrap) and on-site guards. The path runs from public lobby -> vestibule/guarded door -> interior office space. The best plan has to get through that middle step without creating a loud failure at the guard post.
Why option B wins B, tailgating during a very busy time, uses an authorized employee's successful authentication as the entry event. The tester follows closely with a plausible pretext—hands full, phone to ear, arriving with a group—so the guard sees a normal batch of people passing through the vestibule rather than a picked lock, a forged badge, or a stranger claiming to be staff. Busy periods increase the chance that the guard cannot individually challenge every person, and the mantrap's one-person-at-a-time design is easiest to defeat socially when traffic is high. This is the lowest-risk, least forensic option and fits a physical/social-engineering assessment.
Why the other options fail A, cloning badge information in public areas, may be possible in a multi-tenant lobby, but it requires close proximity to a badge and reader; a cloned credential may not carry the right access level, and the guard/vestibule still challenges the entry. C, picking the rear lock, is forced entry: it risks damage, alarms, and guard response, and it does not address the vestibule/guard layer. D, impersonating an employee, can support a pretext, but alone it does not solve the controlled door—the person still needs a valid badge or an escort, and guards are specifically watching for people who do not belong. A community explanation similarly notes that vestibules and guards make lock-picking and casual impersonation high-risk, and that cloning still requires getting close enough to read a badge and then presenting one that works at the door. The best answer is B.
Official Reference
https://www.comptia.org/certifications/pentest
This link opens the official vendor documentation in a new tab.
Exam Strategy
When a physical-access item lists vestibules, guards, or multi-tenant lobbies, eliminate options that require defeating the control directly—picking, forcing, or presenting a cloned or fake credential. Favor the technique that rides a legitimate access event, such as tailgating at peak traffic, because it leaves the guard and access system seeing normal authorized passage. On exam day, map the path from public space to secured suite and ask which option survives each checkpoint. Also check whether the option requires equipment or reconnaissance not stated.
Frequently Asked Questions
Why is tailgating better than cloning a badge at this site?
Does impersonating an employee solve the access-control vestibule problem?
What makes lock picking a poor choice in this scenario?
Community Votes
65% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 1 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 1
-
speedphreak67 👍 1 Answered B• Direct answer: B. Tailgate into the facility during a very busy time. is the best attack plan. • Why this option works best: • Vestibules and Guards: An access control vestibule (mantrap) and on-site security guards make direct force, lock-picking (Option C), or casual impersonation (Option D) high-risk and easily detected. • Cloning Badges (Option A): Cloning a badge still requires getting close enough to a target to skim or capture radio-frequency data without raising suspicion, which is harder when guards are actively watching the entry doors. • Tailgating (Option B): During peak hours (such as shift changes or lunch rushes), high foot traffic and human courtesy (people holding doors open for others) overwhelm security guards and make tailgating/piggybacking a standard, low-friction physical penetration testing technique.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All PT0-003 Questions
Access 120 questions with complete answers and detailed explanations.
View Full PT0-003 Practice Test →