Social engineering attack where an attacker pretends to be someone they are not.

Social engineering attack where an attacker pretends to be someone they are not.

• A. Phishing
• B. Impersonation
• C. Lure
• D. Supply chain

Answer: (B)

Impersonation occurs when an attacker pretends to be someone they are not in order to manipulate the target. By adopting a believable identity—such as a coworker, manager, IT staff, or another trusted figure—the attacker leverages established trust to coax the victim into revealing credentials, sharing sensitive information, or granting access. This tactic relies on social dynamics and perceived authority to lower skepticism, and it can happen over the phone, via email, or in person. While phishing involves deceptive messages designed to trigger actions, the defining aspect here is the impersonation of a real person or role. The other options describe related tactics that don’t center on adopting another identity in the same way.

Impersonation occurs when an attacker pretends to be someone they are not in order to manipulate the target. By adopting a believable identity—such as a coworker, manager, IT staff, or another trusted figure—the attacker leverages established trust to coax the victim into revealing credentials, sharing sensitive information, or granting access. This tactic relies on social dynamics and perceived authority to lower skepticism, and it can happen over the phone, via email, or in person. While phishing involves deceptive messages designed to trigger actions, the defining aspect here is the impersonation of a real person or role. The other options describe related tactics that don’t center on adopting another identity in the same way.