CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ144

VerifiedSecure Software Concepts

Shoulder surfing is an in-person attack in which an attacker collects information about an organization's premises. It is often carried out by secretly watching an employee's computer keyboard while the employee enters a password at an access point, such as a terminal or website. Which of the following is violated by a shoulder-surfing attack?

Explanation

Confidentiality is violated because shoulder surfing exposes sensitive information, such as credentials, to an unauthorized observer.

Community Discussion

No comments yet. Be the first to start the discussion!