Which term describes the social engineering attack where the attacker pretends to be someone else?

Which term describes the social engineering attack where the attacker pretends to be someone else?

• A. Supply chain
• B. Impersonation
• C. Unsecure network
• D. Lure

Answer: (B)

Impersonation is the social engineering tactic in which an attacker pretends to be someone else to exploit trust and gain information or access. By adopting the identity of a known person or trusted entity—such as a coworker, manager, or vendor—the attacker creates a plausible rationale for actions like revealing passwords, approving a transfer, or granting access. The effectiveness comes from leveraging perceived legitimacy and authority, which lowers the target’s guard and can prompt quick compliance, especially when urgency or authority is invoked. This is why pretending to be someone else best fits the scenario. Other terms describe different concepts: a supply chain issue relates to vulnerabilities introduced through trusted suppliers, an unsecure network points to network weaknesses, and lure is a generic baiting tactic that doesn’t inherently specify posing as another person. To defend against impersonation, verify identities through independent channels, use multi-factor authentication, and train responders to spot suspicious requests.

Impersonation is the social engineering tactic in which an attacker pretends to be someone else to exploit trust and gain information or access. By adopting the identity of a known person or trusted entity—such as a coworker, manager, or vendor—the attacker creates a plausible rationale for actions like revealing passwords, approving a transfer, or granting access. The effectiveness comes from leveraging perceived legitimacy and authority, which lowers the target’s guard and can prompt quick compliance, especially when urgency or authority is invoked.

This is why pretending to be someone else best fits the scenario. Other terms describe different concepts: a supply chain issue relates to vulnerabilities introduced through trusted suppliers, an unsecure network points to network weaknesses, and lure is a generic baiting tactic that doesn’t inherently specify posing as another person. To defend against impersonation, verify identities through independent channels, use multi-factor authentication, and train responders to spot suspicious requests.