Examkin

Question

Difficulty: EasySocial Engineering and Threat Types

During a physical security audit of a corporate office, a technician finds several un-shredded documents containing internal network IP addresses, system user names, and written passwords inside an open recycling bin located outside the facility. Which of the following social engineering threat types is represented by this vulnerability?

  1. Dumpster divingAnswer
  2. B
    Shoulder surfing
  3. C
    Tailgating
  4. D
    Pretexting

Answer

Dumpster diving
Searching through unsecured disposal bins or trash receptacles to find sensitive records, network maps, or user credentials is the exact definition of dumpster diving.

Step-by-Step Solution

1
Analyze the physical security scenario presented in the stem.
Identified sensitive corporate documents discarded intact in an accessible exterior recycling bin.
The threat relies on gathering discarded physical waste containing credentials and network configurations.
2
Classify the observed threat vector according to standard security definitions.
Rummaging through discarded trash or recycling bins for sensitive data is categorized as dumpster diving.
Implementing strict document destruction policies (e.g., cross-cut shredding) mitigates dumpster diving risks.

Key Concept

Dumpster Diving Physical Threat Vector
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic