Soru

Zorluk: KolaySocial Engineering and Threat Types

While working on a company laptop in a public cafe, a remote employee notices an unfamiliar individual standing nearby and looking directly over their shoulder to observe credentials as they are typed. Which of the following social engineering threat types is occurring in this scenario?

  1. A
    Pretexting
  2. Shoulder surfingCevap
  3. C
    Tailgating
  4. D
    Dumpster diving

Cevap

Shoulder surfing
The correct answer is shoulder surfing because the attacker is visually monitoring the user's screen and keyboard in a public area to capture sensitive login details.

Adım Adım Çözüm

1
Analyze the attack vector described in the scenario.
The attack involves direct physical line-of-sight observation of an employee's computer screen and keyboard in a public setting.
Identifying the method of observation narrows down the specific social engineering threat category.
2
Match the observed behavior with standard social engineering terminology.
Directly watching someone enter sensitive information over their shoulder or from a nearby vantage point is classified as shoulder surfing.
Understanding security definitions allows proper classification and mitigation.

Anahtar Kavram

Shoulder Surfing
Tahmini Süre:45s
Bu soruyu puanla