Which term describes leaving behind malicious software or devices in a public area to infect user devices?

• A. Baiting
• B. Phishing
• C. Tailgating
• D. Social Engineering

Answer: (A)

This question tests knowledge of social engineering that uses a physical lure to spread malware. Baiting works by leaving a malicious device or media in a place where people are likely to find it. The attacker tempts curiosity or the sense of a harmless opportunity—think an infected USB drive or a CD labeled with something intriguing—so a user plugs it into their device, unintentionally installing malware. The effectiveness of baiting relies on the human tendency to seize tempting or convenient opportunities, especially when something appears to be free or useful.

Phishing involves tricking someone via electronic messages to disclose credentials or click harmful links, not leaving physical items behind. Tailgating is about following someone into a restricted area to gain access, a different kind of security breach. Social engineering is the broad category that includes many deception techniques, but baiting specifically centers on the lure of a tangible, meant-to-be-used item left in a public space.

So the term that best fits leaving behind malicious software or devices in a public area to infect user devices is baiting.