CISSP-ISSAP: Information Systems Security Architecture Professional

Question

Shoulder surfing is an in-person attack in which an attacker collects information about an organization's premises. It is often carried out by covertly watching an employee's computer keyboard while the employee types a password at an access point, such as a terminal or Web site. Which of the following is violated by a shoulder-surfing attack?

Explanation

Confidentiality requires that sensitive information be accessible only to authorized parties. Watching someone enter a password allows an unauthorized person to obtain that information, constituting unauthorized disclosure.

CISSP-ISSAP: Information Systems Security Architecture Professional

AstroTutor

Notes

Readiness

QuestionQ87

Community Discussion