nerdexam
EC-Council

312-50V11 · Question #460

The company ABC recently discovered that their new product was released by the opposition before their premiere. They contract an investigator who discovered that the maid threw away papers with confi

The correct answer is C. Dumpster diving. Dumpster diving is the practice of physically searching discarded trash to recover confidential documents, which is exactly how the opposition obtained the company's product details.

Footprinting and Reconnaissance

Question

The company ABC recently discovered that their new product was released by the opposition before their premiere. They contract an investigator who discovered that the maid threw away papers with confidential information about the new product and the opposition found it in the garbage. What is the name of the technique used by the opposition?

Options

  • AHack attack
  • BSniffing
  • CDumpster diving
  • DSpying

How the community answered

(23 responses)
  • A
    4% (1)
  • C
    91% (21)
  • D
    4% (1)

Why each option

Dumpster diving is the practice of physically searching discarded trash to recover confidential documents, which is exactly how the opposition obtained the company's product details.

AHack attack

A hack attack refers to unauthorized access to computer systems or networks - no digital intrusion of any kind occurred in this scenario.

BSniffing

Sniffing involves capturing and analyzing network packets as they travel across a network - it is a digital technique that does not apply to physical document retrieval.

CDumpster divingCorrect

Dumpster diving is a well-defined information-gathering technique in which an attacker physically searches garbage bins or recycling areas for discarded documents, notes, printouts, or hardware containing sensitive data. No digital or network access is required - the attacker exploits poor physical disposal practices. In this case, the opposition found confidential product papers in the garbage, which is the textbook definition of dumpster diving.

DSpying

Spying is a general, non-technical term and is not a recognized specific attack classification in information security - dumpster diving is the precise technical name for this physical information-gathering technique.

Concept tested: Dumpster diving physical information gathering

Source: https://csrc.nist.gov/glossary/term/dumpster_diving

Topics

#dumpster diving#physical reconnaissance#information gathering#social engineering

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice