nerdexam
CompTIA

220-802 · Question #625

A company's security guard found Ann, an unauthorized person, searching through the recycling dumpster behind the building. When Ann was questioned she responded with, "I work for the company and…

The correct answer is A. Social engineering. Social engineering is the manipulation of people to gain unauthorized access to information or systems. Ann is performing 'dumpster diving' (searching trash for sensitive documents) and using a fabricated story ('I lost a report') to justify her presence - both are classic…

Hardware and network troubleshooting

Question

A company's security guard found Ann, an unauthorized person, searching through the recycling dumpster behind the building. When Ann was questioned she responded with, "I work for the company and have lost a report". Which of the following is occurring?

Options

  • ASocial engineering
  • BMalware
  • CPhishing
  • DShoulder surfing

How the community answered

(14 responses)
  • A
    86% (12)
  • B
    7% (1)
  • D
    7% (1)

Explanation

Social engineering is the manipulation of people to gain unauthorized access to information or systems. Ann is performing 'dumpster diving' (searching trash for sensitive documents) and using a fabricated story ('I lost a report') to justify her presence - both are classic social engineering tactics. The deceptive excuse is the key indicator. Malware involves malicious software. Phishing uses fraudulent electronic messages. Shoulder surfing involves visually stealing information from screens.

Topics

#social engineering#dumpster diving#physical security#security threats

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice