You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?

Question

Options

• ANatural threat
• BOrganizational threat
• CSocial Engineering

• A
  7% (3)
• B
  20% (8)
• C
  73% (30)

Explanation

Social Engineering is correct because this scenario involves a human manipulating another human into revealing sensitive information (a password) by impersonating a trusted authority (the Helpdesk) - no technical hacking required, just psychological manipulation.

Why the distractors are wrong:

• A (Natural threat): Natural threats are environmental events like floods, fires, or earthquakes that damage systems - they have nothing to do with human deception.
• B (Organizational threat): Organizational threats refer to internal risks from policies, processes, or insider misuse - not an external caller tricking you.

Memory tip: Think of "social" as in socializing - Social Engineering attacks work through conversation and trust, not code or nature. If someone is talking you into giving up credentials, it's Social Engineering.

No community discussion yet for this question.