ITPEC IP April 2020 Question 44

Affixing a privacy filter on the screen — shoulder surfing is peeking at the screen or keypad from nearby, so the measure has to block the onlooker's view.

Shoulder surfing is a form of social engineering: someone beside or behind the user reads a PIN, password or other information as it is entered or displayed. A privacy filter narrows the viewing angle so that only the person directly in front can see the screen; shielding the hand while typing a PIN works the same way.

Answer (c)

Why not others:

• •(a) — keeping the OS up to date closes software vulnerabilities, but a person looking at the screen needs no vulnerability
• •(b) — turning off the position information function stops location tracking, which has nothing to do with someone watching the screen
• •(d) — a strap guards against dropping or snatching the phone, a physical loss, not against observation

Key rule: Match the countermeasure to the channel of the threat: shoulder surfing is a visual, physical attack, so view-blocking measures work and software settings do not.

Security · AI-written, may contain errors