A bystander takes note while a customer is sharing credit card information over the phone. Which of the following is being performed?

Social engineering involves manipulating individuals into divulging information or performing actions, which is not what a passive bystander is doing by simply listening.

Snooping is a broader term for covert observation or investigation, but eavesdropping is a more specific term for listening to private conversations.

Eavesdropping is the act of secretly listening to a private conversation without consent, which precisely describes a bystander overhearing sensitive credit card information being shared over the phone, constituting a passive attack.

An on-path attack, such as a man-in-the-middle attack, involves actively intercepting and potentially altering network communication between two parties, which is an active network attack, not passive listening by a bystander.