nerdexam
Cisco

200-201 · Question #380

What is a description of a social engineering attack?

The correct answer is B. fake offer for free music download to trick the user into providing sensitive data. A social engineering attack involves manipulating individuals into performing actions or divulging confidential information, often through deceptive tactics like fake offers for free content.

Submitted by daniela_cl· Mar 6, 2026Security Concepts

Question

What is a description of a social engineering attack?

Options

  • Apackage deliberately sent to the wrong receiver to advertise a new product
  • Bfake offer for free music download to trick the user into providing sensitive data
  • Cmistakenly received valuable order destined for another person and hidden on purpose
  • Demail offering last-minute deals on various vacations around the world with a due date and a

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    94% (29)
  • C
    3% (1)

Why each option

A social engineering attack involves manipulating individuals into performing actions or divulging confidential information, often through deceptive tactics like fake offers for free content.

Apackage deliberately sent to the wrong receiver to advertise a new product

Sending a package deliberately to the wrong receiver to advertise a new product is a marketing tactic, not a security attack aimed at data theft or system compromise.

Bfake offer for free music download to trick the user into providing sensitive dataCorrect

A social engineering attack fundamentally relies on deception to trick users into compromising security, and a fake offer for free music that requires sensitive data (like login credentials or personal information) perfectly aligns with this method. This tactic preys on human curiosity or desire for free goods, leading users to willingly provide information they shouldn't.

Cmistakenly received valuable order destined for another person and hidden on purpose

Mistakenly receiving a valuable order and hiding it is a form of theft or unethical behavior, not a social engineering attack designed to exploit human vulnerability for cybersecurity gain.

Demail offering last-minute deals on various vacations around the world with a due date and a

An email offering last-minute deals on vacations, even with a due date, is generally a legitimate marketing email unless it contains malicious links or requests for sensitive information outside of a normal transaction process.

Concept tested: Social engineering definition and examples

Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/social-engineering?view=o365-worldwide

Topics

#Social engineering#Phishing

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice