312-49 · Question #157
Dumpster Diving refers to:
The correct answer is A. Searching for sensitive information in the user's trash bins and printer trash bins, and searching. Dumpster diving is a physical social engineering and reconnaissance technique where an attacker searches through an organization's discarded materials - trash bins, recycling bins, shredder waste, or printer output trays - to find sensitive information such as passwords, account
Question
Dumpster Diving refers to:
Options
- ASearching for sensitive information in the user's trash bins and printer trash bins, and searching
- BLooking at either the user's keyboard or screen while he/she is logging in
- CConvincing people to reveal the confidential information
- DCreating a set of dictionary words and names, and trying all the possible combinations to crack
How the community answered
(36 responses)- A94% (34)
- B3% (1)
- D3% (1)
Explanation
Dumpster diving is a physical social engineering and reconnaissance technique where an attacker searches through an organization's discarded materials - trash bins, recycling bins, shredder waste, or printer output trays - to find sensitive information such as passwords, account numbers, internal documents, or org charts. Option B describes shoulder surfing. Option C describes social engineering/pretexting. Option D describes a dictionary or brute-force password attack. Dumpster diving is a real and effective attack vector, which is why secure disposal policies (shredding, degaussing) are important.
Topics
Community Discussion
No community discussion yet for this question.