220-802 Question #625: Real Exam Question with Answer & Explanation

The correct answer is A: Social engineering. Social engineering is the manipulation of people to gain unauthorized access to information or systems. Ann is performing 'dumpster diving' (searching trash for sensitive documents) and using a fabricated story ('I lost a report') to justify her presence - both are classic social

Question

A company's security guard found Ann, an unauthorized person, searching through the recycling dumpster behind the building. When Ann was questioned she responded with, "I work for the company and have lost a report". Which of the following is occurring?

Options

ASocial engineering
BMalware
CPhishing
DShoulder surfing

Explanation

Social engineering is the manipulation of people to gain unauthorized access to information or systems. Ann is performing 'dumpster diving' (searching trash for sensitive documents) and using a fabricated story ('I lost a report') to justify her presence - both are classic social engineering tactics. The deceptive excuse is the key indicator. Malware involves malicious software. Phishing uses fraudulent electronic messages. Shoulder surfing involves visually stealing information from screens.

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice