Exam CISSP topic 1 question 79 discussion

Answer is D

The valid option in this case is option D: Discovery. The discovery stage is focused on gathering information about the target organization, its systems, and its infrastructure. This information can include both technical and non-technical data. Dumpster diving specifically involves searching through physical trash or waste disposal areas of the target organization to gather potentially sensitive or valuable information. By examining discarded documents, invoices, printouts, or other materials, an attacker can uncover valuable information such as system configurations, network diagrams, passwords, or even confidential documents. This information can then be used in subsequent stages of the penetration test to exploit vulnerabilities and gain unauthorized access to the target organization's systems.

Obviously D

Answer D Discovery “The discovery phase of penetration testing includes two parts. The first part is the start of actual testing, and covers information gathering and scanning. Dumpster diving—gathering info on a target by digging through what they have thrown out https://www.sciencedirect.com/topics/computer-science/discovery-phase

More information on dumpster diving: https://www.techtarget.com/searchsecurity/definition/dumpster-diving https://crashtest-security.com/penetration-test-steps/

I was thinking planning at first.... but then it hit me. If they are doing dumpster diving.....they prob finish the planning stage.