Which of the following technologies is used by malicious employees to obtain user passwords?

The correct answer is D. Shoulder surfing. Shoulder surfing is the practice of physically observing someone's screen, keyboard, or input device to capture sensitive information such as passwords or PINs. It is a low-tech, insider threat commonly associated with malicious employees or nearby individuals in shared spaces…

Hardware

Question

Options

AMain-in-the-middle
BPhishing
CTailgating
DShoulder surfing

How the community answered

(50 responses)

A
2% (1)
B
4% (2)
C
2% (1)
D
92% (46)

Explanation

Shoulder surfing is the practice of physically observing someone's screen, keyboard, or input device to capture sensitive information such as passwords or PINs. It is a low-tech, insider threat commonly associated with malicious employees or nearby individuals in shared spaces. Man-in-the-middle (A) intercepts network communications between two parties-it is a network-layer attack, not a physical observation technique. Phishing (B) is a social-engineering email attack targeting users broadly, not specific to employee observation. Tailgating (C) is physically following an authorized person through a secured door without credentials-it is an access control bypass, not a credential theft method.

Topics

#shoulder surfing#social engineering#physical security#password theft

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice