nerdexam
CompTIA

SY0-301 · Question #407

Physical documents must be incinerated after a set retention period is reached. Which of the following attacks does this action remediate?

The correct answer is B. Dumpster Diving. Dumpster diving is a physical social engineering/reconnaissance attack where an attacker searches through discarded trash or recycling to find sensitive information (documents, printouts, sticky notes with passwords, etc.). Incinerating documents ensures they are completely destr

Threats, vulnerabilities, and mitigations

Question

Physical documents must be incinerated after a set retention period is reached. Which of the following attacks does this action remediate?

Options

  • AShoulder Surfing
  • BDumpster Diving
  • CPhishing
  • DImpersonation

How the community answered

(26 responses)
  • B
    92% (24)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Dumpster diving is a physical social engineering/reconnaissance attack where an attacker searches through discarded trash or recycling to find sensitive information (documents, printouts, sticky notes with passwords, etc.). Incinerating documents ensures they are completely destroyed and cannot be recovered from waste receptacles, directly remediating dumpster diving. Shoulder surfing (choice A) is mitigated by screen placement and privacy screens, not document destruction. Phishing (choice C) is an email/digital social engineering attack and is not affected by how physical documents are destroyed. Impersonation (choice D) involves an attacker pretending to be someone else - document destruction does not prevent this.

Topics

#dumpster diving#document destruction#data disposal#physical security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice