I've been studying for the Security+ and have run into a bit of a problem.

Some of the texts that I have read state that dumpster diving is a passive attack, while others state that it is an active attack.

I can see why some of the texts claim that it is an active attack, since one has to actively search for information, but I have to disagree with the classification.

I would have to say that it is a passive attack, since you are only doing information gathering, and not actively trying to attack any resource.

To those of you that have taken the exam, or know the answer..... What is CompTIA's stand on this question? Active or Passive?

Thanks

Report this post to a moderator

I would consider it passive as you are just collecting info without entering the environment of the target, where say a social engineering call to the receptionist could be considered active.
One of the problems with this exam is that Compita is testing on opinions and subjective things rather than cold hard facts.

__________________
Go hard or go home!

Report this post to a moderator