nerdexam
CompTIA

220-1102 · Question #417

Which of the following social engineering tactics is best avoided by shredding sensitive documents?

The correct answer is A. Dumpster diving. Shredding sensitive documents is the most effective way to prevent dumpster diving, a social engineering tactic.

Security

Question

Which of the following social engineering tactics is best avoided by shredding sensitive documents?

Options

  • ADumpster diving
  • BPhishing
  • CWhaling
  • DShoulder surfing

How the community answered

(64 responses)
  • A
    88% (56)
  • B
    3% (2)
  • C
    8% (5)
  • D
    2% (1)

Why each option

Shredding sensitive documents is the most effective way to prevent dumpster diving, a social engineering tactic.

ADumpster divingCorrect

Dumpster diving is a social engineering technique where attackers search through discarded trash for sensitive information like financial statements, employee records, or network diagrams. Shredding these documents before disposal makes the information unreadable and prevents attackers from reconstructing it, thus directly mitigating this specific threat.

BPhishing

Phishing involves deceptive electronic communications, typically email, to trick individuals into revealing sensitive information, which shredding documents does not prevent.

CWhaling

Whaling is a highly targeted form of phishing aimed at high-profile individuals, which is not prevented by document shredding.

DShoulder surfing

Shoulder surfing involves directly observing someone entering sensitive information, such as passwords, which shredding documents does not prevent.

Concept tested: Social engineering prevention (Dumpster diving)

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/dumpster-diving?view=o365-worldwide

Topics

#social engineering#dumpster diving#physical security#data disposal

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice