Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 3 Question 100 Discussion

Posted by Lindsey on Apr 29, 2025 at 11:12 AM

You work as a security manager for BlueWell Inc. You are performing the external vulnerability testing, or penetration testing to get a better snapshot of your organization's security posture. Which of the following penetration testing techniques will you use for searching paper disposal areas for unshredded or otherwise improperly disposed-of reports?

Suggested Answer: C

Dumpster diving technique is used for searching paper disposal areas for unshredded or otherwise improperly disposed-of reports.

Answer B is incorrect. In scanning and probing technique, various scanners, like a port scanner, can reveal information about a

network's infrastructure and enable an intruder to access the network's unsecured ports.

Answer D is incorrect. Demon dialing technique automatically tests every phone line in an exchange to try to locate modems that are

attached to the network.

Answer A is incorrect. In sniffing technique, protocol analyzer can be used to capture data packets that are later decoded to collect

information such as passwords or infrastructure configurations.


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
RU
Rutha 10 months ago
I agree, dumpster diving is crucial for finding sensitive info.
FR
Frederick 10 months ago
Wait, is dumpster diving actually a thing in pen testing?
FR
Freeman 10 months ago
Definitely dumpster diving! That's the right technique for that.
SE
Serina 10 months ago
Not sure about this... sounds a bit too old school.
KA
Karima 10 months ago
Scanning and probing seems more relevant, though.
TE
Teri 11 months ago
I practiced a question similar to this, and I believe dumpster diving is definitely the right choice for finding unshredded documents.
TA
Tammi 11 months ago
Scanning and probing sounds familiar, but I don't think it applies to searching for paper reports.
EV
Evangelina 11 months ago
I'm not entirely sure, but I feel like sniffing is more about network traffic, not physical documents.
MA
Marti 11 months ago
I think I remember something about dumpster diving being a technique used to find sensitive information in discarded materials.
DE
Denae 12 months ago
This is a good one. I remember learning about dumpster diving as a way to physically access sensitive information that wasn't properly destroyed. I'm confident that C is the right answer here.
HA
Hailey 12 months ago
I'm a little confused by this question. Sniffing, scanning, and demon dialing don't really seem relevant to searching for improperly disposed-of documents. I'm leaning towards C, but I want to double-check my understanding before answering.
DO
Dorethea 12 months ago
Okay, let me think this through step-by-step. We're looking for a technique to search paper disposal areas for unshredded documents. Dumpster diving seems like the most logical choice here. I'm going to go with C.
CR
Crista 1 year ago
Hmm, I'm not totally sure about this one. I know dumpster diving is a common penetration testing technique, but I'm not 100% confident that's the right answer here. I'll have to think it through a bit more.
SU
Sue 1 year ago
This one seems pretty straightforward. I think the answer is C - Dumpster diving. That's the technique used to search for improperly disposed-of documents.
0/2000 characters

Save Cancel