Which behavior most clearly indicates suspicious activity around entry points?

• A. Tailgating and attempting to avoid cameras are indicators.
• B. Arriving on time for a shift is suspicious.
• C. Taking notes during a briefing is suspicious.
• D. Checking in with a supervisor is suspicious.

Answer: (D)

Coordinated access through proper channels is the foundation of entry-point security. The behavior of checking in with a supervisor signals a potential attempt to gain entry by bypassing the normal credential verification process. It suggests social engineering or manipulation of authority to authorize access on the spot, which undermines established controls and creates a red flag about legitimacy.

While tailgating or avoiding cameras clearly shows an effort to bypass controls, involving a supervisor points to exploiting authority to obtain access, a subtler but serious risk. Arriving on time and taking notes during a briefing are routine and don’t by themselves indicate suspicious activity.