A user, Ann, receives a call asking for her password to troubleshoot a problem. Which of the following describes this type of security threat?

Malware is malicious software designed to disrupt, damage, or gain unauthorized access to computer systems, but the threat described is a human-based deception, not software.

Social engineering is the act of manipulating individuals into performing actions or divulging confidential information, such as passwords, by exploiting human psychology and trust. The attacker calling Ann and asking for her password under the guise of "troubleshooting" is a classic social engineering tactic.

Spam refers to unsolicited bulk electronic messages, typically emails, but this threat is an interactive phone call, not unsolicited electronic communication.

Physical security involves protecting assets from physical threats like theft or damage, but this scenario describes a psychological manipulation, not a physical threat.