CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ203

VerifiedSecure Software Testing

You are a security manager at BlueWell Inc. You are carrying out external vulnerability testing, or penetration testing, to obtain a clearer picture of your organization’s security posture. Which of the following penetration-testing techniques would you use to search paper-disposal areas for reports that are unshredded or otherwise disposed of improperly?

Explanation

Dumpster diving is a physical information-gathering technique that involves examining discarded materials for sensitive information, including reports that were not shredded or were improperly disposed of.

Community Discussion

No comments yet. Be the first to start the discussion!