Electronic piggybacking occurs when an attacker takes advantage of a legitimate computer user's active session.

• A. True
• B. False
• C. It never happens
• D. Only hardware access is involved

Answer: (A)

Electronic piggybacking means exploiting a legitimate user's active session to access systems or data without re-authenticating. When someone logs in and leaves the session open or a session token remains valid, another person can slip in and act as that user, taking advantage of the trust placed in the existing session. This is a software-level vulnerability, not about stealing hardware or credentials directly; it hinges on session tokens, cookies, or other persistence mechanisms that keep the user authenticated.

That’s why the statement is true: an attacker can gain access by riding on an already authenticated session rather than forcing a new login. The other options don’t fit because piggybacking does occur, and it isn’t limited to hardware access—it's about abusing an active, valid session.