Ethical Hacking Essentials Practice Test

What is the term for a technique where an attacker installs small devices to record actions on the victim's system?

1. Shoulder Surfing

2. Eavesdropping

3. Social Engineering

4. Impersonation

The correct answer is: Shoulder Surfing

The technique described involves a physical method of capturing information by discreetly observing or recording a target's actions, particularly in the context of their device usage. Shoulder surfing specifically refers to the act of watching someone enter sensitive information, such as passwords or PINs, often by directly looking over their shoulder. While eavesdropping typically relates to secretly listening to conversations or signals, and social engineering involves manipulating individuals to divulge confidential information, shoulder surfing directly captures the act of observing actions in a physical setting, making it the most accurate term for the technique where small devices or direct observation is used to monitor a victim's activities. Impersonation involves pretending to be someone else to gain access or information, which does not align with the act of recording actions on a system. Thus, shoulder surfing is the technique that best describes the scenario of observing and potentially recording a victim's sensitive actions directly.