Certified Information Security Manager CISM · Free Practice Question Easy
Question 119
Which of the following best defines 'social engineering' in the context of information security?
- A A. The process of building secure software applications
- B B. The use of physical tools to bypass security controls
- C C. The manipulation of individuals into divulging confidential information
- D D. The study of social interactions in a digital environment
Reveal correct answer
Correct answer: C
Explanation
Explanation: Correct: Social engineering involves manipulating people into breaking normal security procedures or divulging confidential information, exploiting human psychology rather than technical hacking techniques. Incorrect: A: This is more related to secure coding practices. B: This describes physical security breaches, not social engineering. D: This is a broader field of study, not specifically related to security breaches.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
