nerdexam
(ISC)2

CSSLP · Question #336

Which of the following are examples of passive attacks? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Dumpster diving C. Eavesdropping D. Shoulder surfing. Passive attacks involve observing or collecting information without altering system resources, with dumpster diving, eavesdropping, and shoulder surfing being common examples of such reconnaissance.

Secure Software Concepts

Question

Which of the following are examples of passive attacks? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ADumpster diving
  • BPlacing a backdoor
  • CEavesdropping
  • DShoulder surfing

How the community answered

(61 responses)
  • A
    89% (54)
  • B
    11% (7)

Why each option

Passive attacks involve observing or collecting information without altering system resources, with dumpster diving, eavesdropping, and shoulder surfing being common examples of such reconnaissance.

ADumpster divingCorrect

Dumpster diving is a passive attack where an attacker sifts through discarded materials to find sensitive information without directly interacting with live systems.

BPlacing a backdoor

Placing a backdoor is an active attack because it involves intentionally modifying a system or software to create a hidden means of unauthorized access.

CEavesdroppingCorrect

Eavesdropping is a passive attack that involves secretly listening to or intercepting communications without detection or modification.

DShoulder surfingCorrect

Shoulder surfing is a passive attack where an attacker directly observes a person entering sensitive information like passwords or PINs.

Concept tested: Passive attack types

Source: https://csrc.nist.gov/glossary/term/passive_attack

Topics

#Passive attacks#Attack types#Information gathering#Reconnaissance

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice