nerdexam
CompTIA

220-1002 · Question #8

An employee reported that a suspicious individual was looking through the recycle bin. Which of the following types of social engineering threats is this?

The correct answer is C. Dumpster diving. Dumpster diving is the social engineering technique of physically searching through trash or recycling bins to retrieve sensitive information that was discarded without proper destruction.

Hardware and network troubleshooting

Question

An employee reported that a suspicious individual was looking through the recycle bin. Which of the following types of social engineering threats is this?

Options

  • APhishing
  • BSpear phishing
  • CDumpster diving
  • DImpersonation

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    91% (42)
  • D
    2% (1)

Why each option

Dumpster diving is the social engineering technique of physically searching through trash or recycling bins to retrieve sensitive information that was discarded without proper destruction.

APhishing

Phishing uses deceptive electronic communications (typically email) to trick users into revealing credentials or clicking malicious links; it does not involve physical searching.

BSpear phishing

Spear phishing is a targeted form of phishing directed at a specific individual or organization using personalized information, still conducted through electronic means.

CDumpster divingCorrect

Dumpster diving involves an attacker physically going through a target organization's waste - such as a recycle bin - to find documents, printed reports, hardware, or other materials containing sensitive data like credentials, account numbers, or internal procedures. This scenario precisely describes that activity.

DImpersonation

Impersonation involves an attacker pretending to be a trusted person or authority figure in person or over a communication channel, not searching through physical waste.

Concept tested: Social engineering - dumpster diving physical threat

Source: https://www.cisa.gov/uscert/ncas/tips/ST04-014

Topics

#dumpster diving#social engineering#physical security#data disposal

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice