A type of email-based social engineering attack, in which the attacker sends email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim.

A type of email-based social engineering attack, in which the attacker sends email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim.

• A. Social engineering
• B. Impersonation
• C. Pretexting
• D. Phishing

Answer: (D)

Phishing is a form of social engineering in which the attacker uses an email that appears to come from a trusted organization, such as a bank, to trick you into revealing private information or credentials. The scenario fits this exactly: an email from a reputable source is used to entice the victim to disclose sensitive data or take an action that compromises security. This specific mechanism—fraudulent messages sent through email to harvest information—defines phishing. Other terms describe related ideas but in different contexts. Impersonation is broader and covers pretending to be someone else in various settings. Pretexting involves creating a believable story or scenario to obtain information, which can occur by phone or in person. Social engineering is the wide umbrella for manipulating people to bypass security, with phishing being the email-based technique used to achieve that goal.

Phishing is a form of social engineering in which the attacker uses an email that appears to come from a trusted organization, such as a bank, to trick you into revealing private information or credentials. The scenario fits this exactly: an email from a reputable source is used to entice the victim to disclose sensitive data or take an action that compromises security. This specific mechanism—fraudulent messages sent through email to harvest information—defines phishing.

Other terms describe related ideas but in different contexts. Impersonation is broader and covers pretending to be someone else in various settings. Pretexting involves creating a believable story or scenario to obtain information, which can occur by phone or in person. Social engineering is the wide umbrella for manipulating people to bypass security, with phishing being the email-based technique used to achieve that goal.