Ethical Hacking Essentials Practice Test

What technique involves observing someone enter confidential information?

1. Shoulder Surfing

2. Social Engineering

3. Piggybacking

4. Whaling

The correct answer is: Shoulder Surfing

Shoulder surfing is a technique where an individual watches someone enter sensitive information, such as passwords or PINs, typically from a close distance. This technique takes advantage of physical proximity to gather confidential data without the victim's knowledge. It often occurs in public spaces, like ATMs or cafes, where individuals may not be aware of their surroundings, thus making them vulnerable to such observation. Social engineering, while related, refers more broadly to manipulation tactics aimed at tricking individuals into divulging confidential information through deception rather than direct observation. Piggybacking involves gaining unauthorized access to a restricted area by following an authorized user, and whaling specifically targets high-profile individuals in an organization. Each of these concepts plays a role in security breaches, but shoulder surfing directly pertains to the act of observing and capturing sensitive data in real-time.