nerdexam
EC-Council

312-49 · Question #157

Dumpster Diving refers to:

The correct answer is A. Searching for sensitive information in the user's trash bins and printer trash bins, and searching. Dumpster diving is a physical social engineering and reconnaissance technique where an attacker searches through an organization's discarded materials - trash bins, recycling bins, shredder waste, or printer output trays - to find sensitive information such as passwords, account

Submitted by haruto_sh· Apr 18, 2026Computer Forensics in Today's World

Question

Dumpster Diving refers to:

Options

  • ASearching for sensitive information in the user's trash bins and printer trash bins, and searching
  • BLooking at either the user's keyboard or screen while he/she is logging in
  • CConvincing people to reveal the confidential information
  • DCreating a set of dictionary words and names, and trying all the possible combinations to crack

How the community answered

(36 responses)
  • A
    94% (34)
  • B
    3% (1)
  • D
    3% (1)

Explanation

Dumpster diving is a physical social engineering and reconnaissance technique where an attacker searches through an organization's discarded materials - trash bins, recycling bins, shredder waste, or printer output trays - to find sensitive information such as passwords, account numbers, internal documents, or org charts. Option B describes shoulder surfing. Option C describes social engineering/pretexting. Option D describes a dictionary or brute-force password attack. Dumpster diving is a real and effective attack vector, which is why secure disposal policies (shredding, degaussing) are important.

Topics

#Dumpster Diving#Social Engineering#Physical Security#Information Gathering

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice