In short
Social engineering manipulates people, rather than technology, into revealing information or giving access. Techniques include phishing, pretexting (inventing a believable story), baiting and tailgating into secure areas.
Key takeaways
- Attackers exploit trust, urgency, fear and helpfulness.
- Security awareness training and verification procedures are the main defenses.
- Tailgating is following an authorized person through a secure door.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A phishing attack primarily exploits: