Which term describes a penetration testing method where an authorized tester uses phishing to gather information?

• A. Social Engineering Test
• B. Ethical Hacking
• C. Operations Penetration
• D. Penetration Testing

Answer: (C)

Manipulating people to reveal information through deception is a social engineering approach. In a penetration test, an authorized tester uses phishing to lure individuals into disclosing credentials or sensitive data, or to click on links that reveal access details. This method targets the human element—awareness, training, and processes—rather than technical flaws in systems. The broader terms describe the overall practice of probing for weaknesses, but they don’t pinpoint the phishing-focused, people-centered technique. A phishing-based assessment is the clear example of a social engineering test.