Question

Manipulating someone within an organization to gain access to confidential information is called

a) diving.
b) hacking.
c) phreaking.
d) social engineering.
e) trashing.

Answer 1

Manipulating someone within an organization to gain access to confidential information is called social engineering.

Step-by-step explanation:

The act of manipulating someone within an organization to gain access to confidential information is called social engineering. Social engineering techniques involve tricking or deceiving individuals into providing sensitive information or granting unauthorized access to systems. This can be done through various means such as impersonation, pretexting, phishing, or baiting.

Social engineering attacks rely on psychological manipulation rather than technical exploits, making it an effective method for hackers to exploit human vulnerabilities. By exploiting trust, curiosity, or fear, attackers can convince unsuspecting individuals to divulge confidential information or perform actions that compromise security.

For example, an attacker might pose as an IT technician and request login credentials from an employee to address a supposed technical issue. Alternatively, they might impersonate a trusted colleague over email or phone, requesting sensitive data.