Which security breach category involves impersonating someone else to gain access?

• A. Eavesdropping
• B. Identity spoofing
• C. Password-based attack
• D. Application layer attack

Answer: (B)

The scenario targets impersonation of another person to gain entry, which is identity spoofing. Here, the attacker acts as if they are someone legitimate, presenting forged credentials or tokens or exploiting session details to pass authentication and access systems. This is different from eavesdropping, which is simply listening to communications; a password-based attack focuses on obtaining or guessing credentials themselves rather than masquerading as a specific user; and an application layer attack exploits weaknesses in software to breach systems, not necessarily by pretending to be someone else. Identity spoofing directly captures the act of pretending to be another user to gain access, making it the correct concept to identify.