312-50V9 · Question #376
Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?
The correct answer is A. Social Engineering. Social engineering is a penetration testing technique that exploits human psychology rather than technical vulnerabilities to bypass security controls.
Question
Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?
Options
- ASocial Engineering
- BPiggybacking
- CTailgating
- DEavesdropping
How the community answered
(38 responses)- A87% (33)
- B8% (3)
- C3% (1)
- D3% (1)
Why each option
Social engineering is a penetration testing technique that exploits human psychology rather than technical vulnerabilities to bypass security controls.
Social engineering specifically involves manipulating individuals through deception, persuasion, or impersonation to divulge confidential information or perform actions that violate security policy. It is classified as a human-interaction-based attack vector in frameworks like CEH and CompTIA Security+, and it directly matches the description of tricking people into breaking normal security procedures.
Piggybacking is a specific physical security attack where an unauthorized person gains entry through a secured door with the knowledge and often the consent of an authorized person, not a broad human-manipulation technique.
Tailgating is a physical intrusion method where an attacker follows an authorized person through a secured door without that person's awareness, making it a subset of physical bypass rather than a broad social manipulation technique.
Eavesdropping is a passive attack that involves intercepting communications (network or verbal) without the target's knowledge, not a technique that relies on tricking people into breaking procedures.
Concept tested: Social engineering as human-based penetration testing
Source: https://learn.microsoft.com/en-us/security/engineering/social-engineering
Topics
Community Discussion
No community discussion yet for this question.