220-802 · Question #710
Physically observing a user input a code or password is known as:
The correct answer is B. Shoulder surfing. Shoulder surfing is the act of directly and physically observing someone entering sensitive information such as a PIN or password.
Question
Physically observing a user input a code or password is known as:
Options
- ASocial engineering.
- BShoulder surfing.
- CTailgating.
- DPhishing.
How the community answered
(53 responses)- A4% (2)
- B89% (47)
- C6% (3)
- D2% (1)
Why each option
Shoulder surfing is the act of directly and physically observing someone entering sensitive information such as a PIN or password.
Social engineering is a broader category of manipulation techniques used to psychologically deceive individuals into revealing information or performing actions, not specifically limited to physical observation.
Shoulder surfing is a physical security attack where an attacker watches a victim enter credentials, PINs, or other sensitive input by looking over their shoulder or from a nearby vantage point, compromising information without any technical intrusion.
Tailgating is a physical security breach where an unauthorized person follows an authorized individual through a secured entry point, unrelated to observing credential input.
Phishing is a digital attack using fraudulent emails, messages, or websites to trick users into entering their credentials, which does not involve physical observation.
Concept tested: Physical security attack - shoulder surfing
Source: https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks
Topics
Community Discussion
No community discussion yet for this question.