Ann, a user who works with many patients during the day, has a privacy screen attached to her monitor. Which of the following does this help prevent?

Rootkits are malicious software that embed at a low OS or firmware level; a physical privacy screen has no effect on software-based threats.

Phishing is a social engineering attack conducted via email or fraudulent websites and is not mitigated by controlling monitor visibility.

Shoulder surfing is the act of an unauthorized person gaining information by directly observing a screen, often in public or shared spaces such as hospitals. A privacy screen uses micro-louver technology to restrict the visible angle to roughly 30 degrees in front of the monitor, making the screen appear black from the sides. For a healthcare worker like Ann who interacts with many patients, this is a critical physical security control to protect patient privacy.

Trojans are malware disguised as legitimate software and operate at the software layer, which a physical screen filter cannot prevent.

Whaling is a targeted phishing attack against high-profile individuals and is an email or web-based threat unrelated to physical monitor visibility.