GIAC Foundational Cybersecurity Technologies Practice Test

What is a common characteristic of social engineering attacks?

1. Technical sophistication

2. Exploiting human psychology

3. Use of malware

4. Accessing physical locations

The correct answer is: Exploiting human psychology

The common characteristic of social engineering attacks lies in exploiting human psychology. These attacks manipulate individuals into divulging confidential information or performing actions that may compromise security. Social engineers rely on psychological principles such as trust, fear, urgency, and social proof to deceive their targets. For instance, they might pose as legitimate colleagues or authority figures to gain the victim's confidence, prompting them to share sensitive information like passwords or personal data. In contrast, technical sophistication is typically associated with more advanced hacking techniques and tools, which are not the primary focus of social engineering. While some social engineering attacks may involve the use of malware, the essence of these attacks is rooted in manipulating human behavior rather than technology itself. Similarly, accessing physical locations is more related to physical security breaches, which do not inherently involve the same psychological tactics as social engineering.