6

A pen test member has gained access to a facility.

She positions herself beside a partition wall in such a way that the screen activity on an employee is clearly viewable.

Which social engineering attack is this?


Shoulder surfing


Shoulder surfing occurs when an attacker stands behind an authorized user and watches their screen activity.


Impersonation occurs when an attacker pretends to be a person of authority.


Tailgating occurs when the attacker uses a fake badge and follows employees through an open door, whereas piggybacking does not involve the use a badge of any sort.