What testing method involves manipulating individuals into revealing sensitive information?

What testing method involves manipulating individuals into revealing sensitive information?

• A. Brute force
• B. Phishing
• C. Social engineering
• D. Network sniffing

Answer: (C)

Social engineering exploits human psychology to coax someone into revealing confidential information or granting access. In testing, it involves manipulating individuals rather than breaking in through technical means, to measure security awareness, policies, and controls. Phishing is a common tactic used within social engineering, but it’s a specific method rather than the overall testing approach. The other options are technical techniques: brute force focuses on guessing passwords, and network sniffing captures data on the network. By simulating social engineering, a tester assesses how well people recognize suspicious requests, enforce proper verification, and respond to social cues that could compromise security.

Social engineering exploits human psychology to coax someone into revealing confidential information or granting access. In testing, it involves manipulating individuals rather than breaking in through technical means, to measure security awareness, policies, and controls. Phishing is a common tactic used within social engineering, but it’s a specific method rather than the overall testing approach. The other options are technical techniques: brute force focuses on guessing passwords, and network sniffing captures data on the network. By simulating social engineering, a tester assesses how well people recognize suspicious requests, enforce proper verification, and respond to social cues that could compromise security.