Examkin

Soru

Zorluk: KolaySocial Engineering and Threat Types

During a physical security audit of a corporate office, a technician finds several un-shredded documents containing internal network IP addresses, system user names, and written passwords inside an open recycling bin located outside the facility. Which of the following social engineering threat types is represented by this vulnerability?

  1. Dumpster divingCevap
  2. B
    Shoulder surfing
  3. C
    Tailgating
  4. D
    Pretexting

Cevap

Dumpster diving
Searching through unsecured disposal bins or trash receptacles to find sensitive records, network maps, or user credentials is the exact definition of dumpster diving.

Adım Adım Çözüm

1
Analyze the physical security scenario presented in the stem.
Identified sensitive corporate documents discarded intact in an accessible exterior recycling bin.
The threat relies on gathering discarded physical waste containing credentials and network configurations.
2
Classify the observed threat vector according to standard security definitions.
Rummaging through discarded trash or recycling bins for sensitive data is categorized as dumpster diving.
Implementing strict document destruction policies (e.g., cross-cut shredding) mitigates dumpster diving risks.

Anahtar Kavram

Dumpster Diving Physical Threat Vector
Bu soruyu puanla

Konular

Social Engineering and Threat Types

Bu konudan daha fazla soru