What is shoulder surfing in a physical security context for network equipment rooms, and what controls mitigate it?

• A.Shoulder surfing is a social engineering technique where an attacker calls pretending to be IT support and asks for a password verbally
• B.Shoulder surfing is a network attack where an attacker reads packets from a directly-connected device by physically monitoring the network cable voltage
• C.Shoulder surfing is observing someone's screen, keyboard input, or badge swipe from over their shoulder without their knowledge, potentially capturing passwords, PINs, or access codes; mitigations for server rooms: privacy screens on monitoring consoles, CCTV coverage of keyboard areas, requiring users to input credentials away from visible areas, and using proximity badge readers (not keypads) to eliminate visible PIN entry
• D.Shoulder surfing only applies to public Wi-Fi environments where others can observe laptop screens