CompTIA PenTest+ (PT0-003) PT0-003 — Question 65

During a routine penetration test, the client's security team observes logging alerts that indicate several ID badges were reprinted after working hours without the appropriate authorization. Which of the following is the penetration tester most likely trying to do?