GISF: GIAC Information Security FundamentalsDemo

Question

Shoulder surfing is an in-person attack in which an attacker obtains information about an organization’s premises. It is often carried out by secretly observing an employee’s computer keyboard while the employee enters a password at an access point, such as a terminal or website. Which of the following is violated by a shoulder-surfing attack?

A Availability
B Integrity
C Confidentiality
D Authenticity

Explanation

Observing a password exposes sensitive information to an unauthorized person. Confidentiality preserves authorized restrictions on information access and disclosure; it is compromised when credentials are disclosed through shoulder surfing.

Learn more

NIST CSRC Glossary: Confidentiality

GISF: GIAC Information Security FundamentalsDemo

AstroTutor

Notes

Readiness

QuestionQ116

Community Discussion