Examkin

Soru

Zorluk: KolaySocial Engineering and Threat Types

A financial analyst working in a public airport lounge notices an unfamiliar individual sitting nearby who is repeatedly looking at their laptop screen while they type sensitive user credentials and view confidential company budget files. Which of the following social engineering threat types is actively occurring in this scenario?

  1. Shoulder surfingCevap
  2. B
    Pretexting
  3. C
    Tailgating
  4. D
    Spear phishing

Cevap

Shoulder surfing
The scenario describes shoulder surfing, which is the act of visually observing a target's screen or input device (such as a keyboard or PIN pad) to steal confidential data, PINs, or passwords without their knowledge.

Adım Adım Çözüm

1
Analyze the scenario indicators
The individual is physically observing the analyst's screen and keyboard input in a public location.
Identifying the method of observation determines whether the attack vector is digital, physical access-based, or visual observation.
2
Map the observation technique to defined social engineering threat types
Directly viewing screens or keystrokes to steal credentials matches the definition of shoulder surfing.
Shoulder surfing relies on visual eavesdropping in close physical proximity without establishing direct communication.

Anahtar Kavram

Social Engineering - Shoulder Surfing
Bu soruyu puanla

Konular

Social Engineering and Threat Types

Bu konudan daha fazla soru