Which practice involves tricking users into providing access information, including tactics like phishing and tailgating?

• A. Social Engineer
• B. Social Engineering
• C. Shoulder Surfing
• D. Phishing

Answer: (B)

Social engineering is the practice of manipulating people to reveal access information or perform actions that compromise security. It relies on human interaction and trust rather than technical flaws. Phishing and tailgating are two common techniques within this broader approach: phishing uses fake emails or websites to trick someone into giving credentials, while tailgating involves following an authorized person into a restricted area to gain access. A social engineer is the person who carries out these tricks, but the concept being described is the overall practice of social engineering. Shoulder surfing is a separate tactic that involves peeking at passwords, and phishing is just one technique used under the social engineering umbrella, not the whole practice itself.