Question

Difficulty: EasySocial Engineering and Threat Types

While working on a company laptop in a public cafe, a remote employee notices an unfamiliar individual standing nearby and looking directly over their shoulder to observe credentials as they are typed. Which of the following social engineering threat types is occurring in this scenario?

  1. A
    Pretexting
  2. Shoulder surfingAnswer
  3. C
    Tailgating
  4. D
    Dumpster diving

Answer

Shoulder surfing
The correct answer is shoulder surfing because the attacker is visually monitoring the user's screen and keyboard in a public area to capture sensitive login details.

Step-by-Step Solution

1
Analyze the attack vector described in the scenario.
The attack involves direct physical line-of-sight observation of an employee's computer screen and keyboard in a public setting.
Identifying the method of observation narrows down the specific social engineering threat category.
2
Match the observed behavior with standard social engineering terminology.
Directly watching someone enter sensitive information over their shoulder or from a nearby vantage point is classified as shoulder surfing.
Understanding security definitions allows proper classification and mitigation.

Key Concept

Shoulder Surfing
Estimated Time:45s
Rate this question