Shoulder surfing is a type of in-person attack in which the attacker gathers information about the premises of an organization. This attack is often performed by looking surreptitiously at the…

The correct answer is D. Confidentiality. Confidentiality ensures that information is accessible only to those authorized to have access. Shoulder surfing directly violates confidentiality because the attacker observes and steals private information (such as passwords or PINs) that they are not authorized to know…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Shoulder surfing is a type of in-person attack in which the attacker gathers information about the premises of an organization. This attack is often performed by looking surreptitiously at the keyboard of an employee's computer while he is typing in his password at any access point such as a terminal/Web site. Which of the following is violated in a shoulder surfing attack?

Options

AAuthenticity
BIntegrity
CAvailability
DConfidentiality

How the community answered

(29 responses)

A
3% (1)
B
7% (2)
D
90% (26)

Explanation

Confidentiality ensures that information is accessible only to those authorized to have access. Shoulder surfing directly violates confidentiality because the attacker observes and steals private information (such as passwords or PINs) that they are not authorized to know. Integrity refers to protecting data from unauthorized modification. Availability refers to ensuring systems and data are accessible when needed. Authenticity refers to verifying that a user or message is genuine. None of these other principles are compromised by merely watching someone type a password.

Topics

#Shoulder surfing#Confidentiality#Physical security

Community Discussion

No community discussion yet for this question.

Full CAP Practice