Information Technology Specialist (ITS) Cybersecurity Practice Exam

Which part of the CIA Triad is compromised by shoulder surfing?

1. Integrity

2. Confidentiality

3. Availability

4. None of the above

The correct answer is: Confidentiality

Shoulder surfing primarily compromises confidentiality, which is one of the three essential components of the CIA Triad (Confidentiality, Integrity, Availability) used in the field of cybersecurity. When someone engages in shoulder surfing, they observe a person's actions—such as entering passwords or viewing sensitive information on a screen—without the individual's knowledge. This unauthorized observation allows the shoulder surfer to gain access to confidential information that should be kept private. Confidentiality is all about protecting sensitive information from unauthorized access. When information is exposed through means such as shoulder surfing, it undermines this principle, leading to potential data breaches and unauthorized disclosure of sensitive data. The other components of the CIA Triad—integrity and availability—are not directly impacted by shoulder surfing in the same way. Integrity refers to the accuracy and trustworthiness of data, and availability relates to ensuring that information is accessible to authorized users when needed. In this scenario, shoulder surfing does not inherently alter the data or impact its accessibility, but it clearly poses a risk to confidentiality.