What technique involves observing a person's screen or keyboard to obtain sensitive information?

What technique involves observing a person's screen or keyboard to obtain sensitive information?

• A. Shoulder surfing
• B. Packet sniffing
• C. Phishing
• D. Data mining

Answer: (A)

Shoulder surfing is a technique where an individual closely observes a user’s screen or keyboard to gather sensitive information, such as passwords or personal identification numbers (PINs). This method is often used in public places where individuals may inadvertently expose their confidential data while typing or viewing information on their devices. It relies on physical proximity to the target rather than electronic means, making it a straightforward but effective way to capture sensitive details without sophisticated technology. In comparison, packet sniffing involves monitoring and capturing network traffic to gather data transmitted over networks, which is distinct from observing physical interactions with devices. Phishing is a form of social engineering that tricks people into giving away sensitive information through deceptive emails or websites, while data mining refers to analyzing large sets of data to discover patterns or extract useful information, which does not involve direct observation of individuals.

Shoulder surfing is a technique where an individual closely observes a user’s screen or keyboard to gather sensitive information, such as passwords or personal identification numbers (PINs). This method is often used in public places where individuals may inadvertently expose their confidential data while typing or viewing information on their devices. It relies on physical proximity to the target rather than electronic means, making it a straightforward but effective way to capture sensitive details without sophisticated technology.

In comparison, packet sniffing involves monitoring and capturing network traffic to gather data transmitted over networks, which is distinct from observing physical interactions with devices. Phishing is a form of social engineering that tricks people into giving away sensitive information through deceptive emails or websites, while data mining refers to analyzing large sets of data to discover patterns or extract useful information, which does not involve direct observation of individuals.