ITPEC IP April 2022 Question 42

Topic: SecurityAlso asked in Spring 2020

When a smartphone is used, which of the following is an appropriate preventive measure for shoulder surfing?

Explanation

Affixing a privacy screen protector — shoulder surfing is peeking at the screen or keypad from nearby, so the measure has to block the onlooker's view.

Shoulder surfing is a form of social engineering: someone beside or behind the user reads a PIN, password or other information as it is entered or displayed. A privacy filter narrows the viewing angle so that only the person directly in front can see the screen; shielding the hand while typing a PIN works the same way.

Answer (c)

Why not others:

  • •(a) — keeping the OS up to date closes software vulnerabilities, but a person looking at the screen needs no vulnerability
  • •(b) — turning off GPS stops location tracking, which has nothing to do with someone watching the screen
  • •(d) — a strap guards against dropping or snatching the phone, a physical loss, not against observation

Key rule: Match the countermeasure to the channel of the threat: shoulder surfing is a visual, physical attack, so view-blocking measures work and software settings do not.

Security · AI-written, may contain errors

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.