Ethical Hacking Essentials Practice Test

In which scenario might shoulder surfing be utilized?

1. Watching someone enter their password

2. Sending a virus warning email

3. Forwarding a chain letter

4. Installing antivirus software

The correct answer is: Watching someone enter their password

Shoulder surfing is a technique used to obtain sensitive information, such as passwords or PINs, by discreetly observing an individual as they enter the information on a device. It typically occurs in public settings where someone can physically see the screen or keyboard of the target’s device. In this context, the scenario of watching someone enter their password directly aligns with the practice of shoulder surfing, as it involves a person observing another individual's keystrokes or screen to capture confidential data. This method is particularly effective in crowded areas, where an attacker may blend in and take advantage of the lack of awareness of the target. The other options do not involve the direct observation of sensitive information. Sending a virus warning email, forwarding a chain letter, and installing antivirus software are all activities that do not relate to the act of watching someone enter their personal information. Therefore, they do not represent situations where shoulder surfing would be applicable.