ITPEC IP April 2022 Question 42
When a smartphone is used, which of the following is an appropriate preventive measure for shoulder surfing?
Explanation
Affixing a privacy screen protector — shoulder surfing is peeking at the screen or keypad from nearby, so the measure has to block the onlooker's view.
Shoulder surfing is a form of social engineering: someone beside or behind the user reads a PIN, password or other information as it is entered or displayed. A privacy filter narrows the viewing angle so that only the person directly in front can see the screen; shielding the hand while typing a PIN works the same way.
Answer (c)
Why not others:
- •(a) — keeping the OS up to date closes software vulnerabilities, but a person looking at the screen needs no vulnerability
- •(b) — turning off GPS stops location tracking, which has nothing to do with someone watching the screen
- •(d) — a strap guards against dropping or snatching the phone, a physical loss, not against observation
Key rule: Match the countermeasure to the channel of the threat: shoulder surfing is a visual, physical attack, so view-blocking measures work and software settings do not.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.