A penetration tester who is performing a physical assessment has achieved physical access to a call center for the assessed company. The tester is able to move freely around the room. Which of the…

Dumpster diving involves sifting through discarded materials and is unlikely to yield quick, real-time confidential information from active screens.

Warwalking is a technique for discovering wireless networks, which is irrelevant when the tester has physical access inside the building and is looking for on-screen information.

Vishing is a voice phishing attack conducted over the phone, not a physical attack method.

Smishing is a phishing attack conducted via SMS messages, not a physical attack method.

Shoulder surfing involves directly observing someone's screen or keyboard input over their shoulder to capture sensitive information like credentials, customer data, or internal communications. In a call center environment, agents often handle confidential information on their screens, making this a highly effective and quick method for a physically present attacker.