A technician is typing the password to logon to a system. A user is standing in close proximity to the technician and is able to see the password being typed. Which of the following BEST describes…

Dumpster diving involves sifting through discarded materials (like trash) to find sensitive information, which is not what occurred in this scenario.

Shoulder surfing is a social engineering technique where an attacker directly observes a user entering sensitive information, such as passwords or PINs, by looking over their shoulder or from a nearby vantage point. This allows the attacker to steal credentials visually.

Phishing is a type of social engineering attack that uses fraudulent communications, typically email, to trick individuals into revealing sensitive information, not direct observation.

Social engineering is a broad category of attacks that manipulate people into performing actions or divulging confidential information; shoulder surfing is a type of social engineering, but shoulder surfing is the more specific and accurate term for this direct observation.