Using persuasion, manipulation, or intimidation to make the victim violate a security policy. The goal of social engineering might be to gain access to an account, gain access to physical premises, or gather information.

Using persuasion, manipulation, or intimidation to make the victim violate a security policy. The goal of social engineering might be to gain access to an account, gain access to physical premises, or gather information.

• A. Social engineering
• B. Impersonation
• C. Lure
• D. Supply chain

Answer: (A)

Social engineering is about manipulating people to bypass security controls rather than exploiting technical weaknesses. In this scenario, someone uses persuasion, manipulation, or intimidation to make a victim violate a security policy, with the goal of gaining access to an account, to physical premises, or to information. That human-centered abuse—getting a person to do what they shouldn’t do—is the essence of social engineering. Impersonation is a tactic that can be part of social engineering (pretending to be someone legitimate to gain trust), but the situation described covers the broader pattern of influencing a person to break policy, which is best captured by the overall concept of social engineering. Lure refers to specific baiting techniques used to entice a target, such as offering a reward or enticing link. It’s a tactic within social engineering, not the overarching category itself. Supply chain involves vulnerabilities arising from external partners, vendors, or components. It doesn’t describe influencing a person to violate policy, so it doesn’t fit as the best label for this scenario.

Social engineering is about manipulating people to bypass security controls rather than exploiting technical weaknesses. In this scenario, someone uses persuasion, manipulation, or intimidation to make a victim violate a security policy, with the goal of gaining access to an account, to physical premises, or to information. That human-centered abuse—getting a person to do what they shouldn’t do—is the essence of social engineering.

Impersonation is a tactic that can be part of social engineering (pretending to be someone legitimate to gain trust), but the situation described covers the broader pattern of influencing a person to break policy, which is best captured by the overall concept of social engineering.

Lure refers to specific baiting techniques used to entice a target, such as offering a reward or enticing link. It’s a tactic within social engineering, not the overarching category itself.

Supply chain involves vulnerabilities arising from external partners, vendors, or components. It doesn’t describe influencing a person to violate policy, so it doesn’t fit as the best label for this scenario.