hardMultiple Choice
PT0-002 Practice Question: A PenTest team is planning to perform a physical…
A PenTest team is planning to perform a physical social engineering engagement to gather information from a client's facility. Which of the following reconnaissance techniques would be LEAST likely to be detected?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Dumpster diving
Dumpster diving (D) is the least likely to be detected because it occurs off-site against discarded materials, typically outside business hours, and leaves no interaction with employees or network systems that could trigger alerts. In contrast, shoulder surfing (A) requires close physical proximity to a victim viewing a screen or keypad, making the attacker observable, and tailgating (C) involves physically following an employee through a controlled access point, which risks challenge by staff or CCTV monitoring. Email phishing (B) is also easily detected because it traverses mail gateways and can be flagged by spam filters, link scanners, or user reporting. Thus, dumpster diving presents the lowest detection risk for a physical social engineering engagement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Shoulder surfing
Why it's wrong here
Shoulder surfing requires the tester to stand within the target's line of sight, so a vigilant employee or camera can observe the observer directly. It is tempting because it genuinely gathers credentials and PINs without touching systems, and would suit a scenario where the tester can loiter near a reception desk or ATM unremarked.
- ✗
Email phishing
Why it's wrong here
Phishing targets users remotely, so it cannot gather on-site facility information, and mail filters or reporting often expose it. It is tempting because phishing is a core social engineering technique for credential harvesting, and would be correct when the objective is remote access rather than physical reconnaissance of a building.
- ✗
Tailgating
Why it's wrong here
Tailgating follows an authorised person through a controlled door, but it still requires physical proximity to access points and staff, making observation by guards or cameras likely. It is used when testing physical perimeter controls, not for gathering information covertly.
- ✓
Dumpster diving
Why this is correct
Dumpster diving involves retrieving discarded documents from rubbish bins outside the facility, requiring no interaction with staff or systems. This passive physical technique leaves no network or access traces, making it the least likely reconnaissance method to be detected.
Go deeper
Related to this question
About these practice questions
One of 777 original PT0-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PT0-003 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PT0-003 exam.