What technique is commonly used in social engineering?

What technique is commonly used in social engineering?

• A. Phishing
• B. Pretexting
• C. SQL injection
• D. Encryption

Answer: (B)

Pretexting sits at the heart of social engineering by using a fabricated scenario and a plausible identity to coax a target into revealing information or granting access. The attacker creates a believable reason for contact—such as posing as IT staff, a bank representative, or a coworker—and then asks for sensitive details or actions that would normally require verification. This approach exploits trust, authority, and the normal desire to be helpful, making it easier for people to comply even when they shouldn’t. Because it focuses on manipulating human behavior rather than breaking technical defenses, pretexting remains a widely used and effective tactic in social engineering, adaptable to phone calls, in-person interactions, or online communications. Phishing is also a social engineering method but relies on deceptive messages to lure victims into clicking links or entering credentials. SQL injection is a technical attack that targets a vulnerability in software, not a manipulation of people. Encryption is a protective control, not an attack technique.

Pretexting sits at the heart of social engineering by using a fabricated scenario and a plausible identity to coax a target into revealing information or granting access. The attacker creates a believable reason for contact—such as posing as IT staff, a bank representative, or a coworker—and then asks for sensitive details or actions that would normally require verification. This approach exploits trust, authority, and the normal desire to be helpful, making it easier for people to comply even when they shouldn’t. Because it focuses on manipulating human behavior rather than breaking technical defenses, pretexting remains a widely used and effective tactic in social engineering, adaptable to phone calls, in-person interactions, or online communications.

Phishing is also a social engineering method but relies on deceptive messages to lure victims into clicking links or entering credentials. SQL injection is a technical attack that targets a vulnerability in software, not a manipulation of people. Encryption is a protective control, not an attack technique.