A small company lacks the resources to properly verify a user's identity when the user calls in for technical support. To which of the following is the company susceptible?

Wiretapping involves secretly monitoring phone or internet communications, which is a technical interception, not a vulnerability exploited by inadequate identity verification.

An on-path attack (formerly Man-in-the-Middle) involves an attacker intercepting and potentially altering communication between two parties, which is a network-level attack.

Snooping refers to unauthorized observation or listening to private information, often passively, rather than actively manipulating someone for information.

Social engineering relies on manipulating individuals into performing actions or divulging confidential information, often by exploiting trust, fear, or a sense of urgency. Without proper identity verification, an attacker can easily impersonate a legitimate user over the phone and trick technical support into resetting passwords, providing account details, or granting unauthorized access.