nerdexam
EC-Council

312-50V9 · Question #602

Within the context of Computer Security, which of the following statements describes Social Engineering best?

The correct answer is C. Social Engineering is the act of getting needed information from a person rather than breaking into. Social engineering manipulates people into revealing confidential information rather than exploiting technical vulnerabilities. It is a non-technical attack vector targeting human psychology.

Social Engineering

Question

Within the context of Computer Security, which of the following statements describes Social Engineering best?

Options

  • ASocial Engineering is the act of publicly disclosing information
  • BSocial Engineering is the means put in place by human resource to perform time accounting
  • CSocial Engineering is the act of getting needed information from a person rather than breaking into
  • DSocial Engineering is a training program within sociology studies

How the community answered

(31 responses)
  • B
    3% (1)
  • C
    90% (28)
  • D
    6% (2)

Why each option

Social engineering manipulates people into revealing confidential information rather than exploiting technical vulnerabilities. It is a non-technical attack vector targeting human psychology.

ASocial Engineering is the act of publicly disclosing information

Publicly disclosing information describes data leakage or doxing, not the act of manipulating a person to obtain information.

BSocial Engineering is the means put in place by human resource to perform time accounting

Time accounting by human resources is an HR administrative function with no relation to cybersecurity attack techniques.

CSocial Engineering is the act of getting needed information from a person rather than breaking intoCorrect

Social engineering is defined in cybersecurity as the act of psychologically manipulating individuals into divulging confidential information or performing actions that compromise security. Instead of exploiting software or hardware vulnerabilities, the attacker exploits human trust, fear, or authority. This distinguishes it from technical hacking methods.

DSocial Engineering is a training program within sociology studies

Social engineering in security has no connection to sociology academic training programs; it is a specific attack methodology.

Concept tested: Definition of social engineering in cybersecurity

Source: https://www.cisa.gov/sites/default/files/publications/infosheet_socialmedia.pdf

Topics

#social engineering#human manipulation#information gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice