nerdexam
EC-Council

312-50V9 · Question #376

Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?

The correct answer is A. Social Engineering. Social engineering is a penetration testing technique that exploits human psychology rather than technical vulnerabilities to bypass security controls.

Social Engineering

Question

Which of the following is a form of penetration testing that relies heavily on human interaction and often involves tricking people into breaking normal security procedures?

Options

  • ASocial Engineering
  • BPiggybacking
  • CTailgating
  • DEavesdropping

How the community answered

(38 responses)
  • A
    87% (33)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Social engineering is a penetration testing technique that exploits human psychology rather than technical vulnerabilities to bypass security controls.

ASocial EngineeringCorrect

Social engineering specifically involves manipulating individuals through deception, persuasion, or impersonation to divulge confidential information or perform actions that violate security policy. It is classified as a human-interaction-based attack vector in frameworks like CEH and CompTIA Security+, and it directly matches the description of tricking people into breaking normal security procedures.

BPiggybacking

Piggybacking is a specific physical security attack where an unauthorized person gains entry through a secured door with the knowledge and often the consent of an authorized person, not a broad human-manipulation technique.

CTailgating

Tailgating is a physical intrusion method where an attacker follows an authorized person through a secured door without that person's awareness, making it a subset of physical bypass rather than a broad social manipulation technique.

DEavesdropping

Eavesdropping is a passive attack that involves intercepting communications (network or verbal) without the target's knowledge, not a technique that relies on tricking people into breaking procedures.

Concept tested: Social engineering as human-based penetration testing

Source: https://learn.microsoft.com/en-us/security/engineering/social-engineering

Topics

#social engineering#human manipulation#security awareness#penetration testing

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice