CompTIA A+ Core 2 (220-1002) — Question 199

Which of the following techniques is used by malicious employees to obtain user passwords?

Answer options

• A. Main-in-the-middle
• B. Phishing
• C. Tailgating
• D. Shoulder surfing

Correct answer: D

Explanation

Shoulder surfing is the act of observing someone’s screen or keyboard to capture their passwords without their knowledge. While phishing involves tricking users into revealing passwords and tailgating refers to unauthorized access, these methods do not directly involve visually capturing passwords as shoulder surfing does.