1. Home
2. All questions
3. Question 385

CISSP study material · question 385 of 500

A penetration test's discovery phase includes searching discarded paperwork and walking through the client's offices. Is this within the scope SP 800-115 describes?

• Security assessment

1. Only where the client's rules of engagement name the specific bins to search.
2. No: physical techniques are outside the guide and require a separate physical security engagement.
3. Yes: dumpster diving and physical walkthroughs are listed as discovery techniques and may reveal passwords written on paper.
4. Only after the attack phase has confirmed a network foothold.

Challenge yourself on this topic → Study as cards