header bg

Scan QR code or get instant email to install app

Question:

Your company's security consultant advised you to burn or shred classified documents before disposing of them. What kind of security risk is the consultant attempting to protect the company from?

A Dumpster diving.
explanation

The vast majority of the paper generated by companies ends up in recycling bins or dumpsters. Attackers may practice dumpster diving to look for highly sensitive information that may be present in dumpsters. When sensitive documents in high-security or government environments are no longer needed, they should be shredded or burned. Looking over someone's shoulder in an attempt to see their passwords or other sensitive information is known as shoulder surfing. Any attempt to coerce, threaten, or cajole someone into disclosing privileged security information constitutes social engineering. In a brute-force attack, passwords are repeatedly tried in an effort to identify the correct one.

Related Information