Which type of attack is aimed at obtaining sensitive information through deception?

Which type of attack is aimed at obtaining sensitive information through deception?

• A. Social engineering
• B. Malware
• C. Phishing
• D. Ransomware

Answer: (C)

Deception to harvest sensitive information relies on manipulating people rather than exploiting software flaws. Phishing is a concrete example where attackers impersonate legitimate entities through emails, texts, or fake websites to persuade individuals to reveal usernames, passwords, or financial data. This direct targeting of a person’s trust through seemingly legitimate prompts makes phishing the best fit for the scenario. Social engineering is the broader category of tricking people, and phishing is a common method within it, specifically aimed at data theft through deceptive prompts. Malware and ransomware, on the other hand, involve malicious software that harms systems or extorts payment, not primarily deceiving users to hand over information, so they don’t fit the scenario as closely.

Deception to harvest sensitive information relies on manipulating people rather than exploiting software flaws. Phishing is a concrete example where attackers impersonate legitimate entities through emails, texts, or fake websites to persuade individuals to reveal usernames, passwords, or financial data. This direct targeting of a person’s trust through seemingly legitimate prompts makes phishing the best fit for the scenario. Social engineering is the broader category of tricking people, and phishing is a common method within it, specifically aimed at data theft through deceptive prompts. Malware and ransomware, on the other hand, involve malicious software that harms systems or extorts payment, not primarily deceiving users to hand over information, so they don’t fit the scenario as closely.