What does social engineering refer to?

What does social engineering refer to?

• A. The use of deception to manipulate someone into giving out confidential information or access to devices or premises
• B. A method to improve team-building
• C. A type of malware
• D. A network routing protocol

Answer: (A)

Social engineering is about using deception to trick people into revealing confidential information or granting access to devices or premises. It relies on manipulating human psychology—trust, fear, urgency, or curiosity—rather than breaking in with technical means. That’s why the option describing deception to manipulate someone into giving out confidential information or access is the best fit: it directly captures the essence of social engineering. In practice, you see this as phishing emails that pretend to be from a legitimate organization asking for passwords, someone posing as a coworker to obtain credentials, or a person pressuring you to bypass security steps. The other ideas describe things unrelated to this tactic—team-building, which is about group activities; malware, which is software designed to harm or take control; and a network routing protocol, which is about directing data on a network. None of those involve the deceptive manipulation of people to gain sensitive access in the same way.

Social engineering is about using deception to trick people into revealing confidential information or granting access to devices or premises. It relies on manipulating human psychology—trust, fear, urgency, or curiosity—rather than breaking in with technical means. That’s why the option describing deception to manipulate someone into giving out confidential information or access is the best fit: it directly captures the essence of social engineering.

In practice, you see this as phishing emails that pretend to be from a legitimate organization asking for passwords, someone posing as a coworker to obtain credentials, or a person pressuring you to bypass security steps. The other ideas describe things unrelated to this tactic—team-building, which is about group activities; malware, which is software designed to harm or take control; and a network routing protocol, which is about directing data on a network. None of those involve the deceptive manipulation of people to gain sensitive access in the same way.