Which of the following represents a type of social engineering attack?

• A. Data encryption
• B. Phishing
• C. Operating system update
• D. Antivirus program

Answer: (B)

Phishing is a well-known type of social engineering attack that involves tricking individuals into providing sensitive information such as usernames, passwords, or credit card numbers by impersonating a trustworthy entity. This attack typically occurs through deceptive emails, messages, or websites designed to look legitimate. The success of phishing relies on manipulating human psychology rather than exploiting technical vulnerabilities, making it a prime example of social engineering.

In contrast, data encryption is a method used to protect information by converting it into a format that cannot be easily understood without a decryption key. Operating system updates are essential for maintaining system security and functionality, while antivirus programs are used to detect and eliminate malicious software. These options focus on protective measures or technical processes rather than the manipulation of individuals, which is central to social engineering attacks like phishing.