Which term describes unauthorized viewing of a display to gain information?

Which term describes unauthorized viewing of a display to gain information?

• A. Tailgating
• B. Shoulder Surfing
• C. Whaling
• D. Spear fishing

Answer: (B)

Shoulder surfing describes the act of someone secretly watching a person’s screen or keyboard to capture sensitive information without permission. This directly fits the idea of unauthorized viewing of a display to gain information, especially when a nearby observer can see passwords, PINs, or other private data as you enter or display it. The risk is common in public or shared spaces, where a quick glance over your shoulder can reveal confidential details. Mitigation includes using a privacy screen, orienting yourself so others can’t easily see the display, shielding the keyboard when typing, and relying on strong authentication beyond passwords, like two-factor authentication. The other terms refer to different security threats: tailgating is about gaining physical access by following someone into a restricted area, while whaling and spear phishing are forms of targeted phishing aimed at deceiving specific individuals or groups.

Shoulder surfing describes the act of someone secretly watching a person’s screen or keyboard to capture sensitive information without permission. This directly fits the idea of unauthorized viewing of a display to gain information, especially when a nearby observer can see passwords, PINs, or other private data as you enter or display it. The risk is common in public or shared spaces, where a quick glance over your shoulder can reveal confidential details. Mitigation includes using a privacy screen, orienting yourself so others can’t easily see the display, shielding the keyboard when typing, and relying on strong authentication beyond passwords, like two-factor authentication. The other terms refer to different security threats: tailgating is about gaining physical access by following someone into a restricted area, while whaling and spear phishing are forms of targeted phishing aimed at deceiving specific individuals or groups.