What is Social engineering?

Answer: A. Calling an employee while claiming to be the system administrator and getting them to reveal their password "to deal with an outage"

Social engineering is the general term for techniques that exploit people's psychology, habits and carelessness rather than technical means, to get them to reveal important information such as passwords or to perform actions. Examples include phone calls or emails from someone claiming to be an administrator, business partner or boss, peeking at someone's screen or keystrokes over their shoulder (shoulder surfing), and rummaging through discarded documents (dumpster diving). A typical feature is wording that leaves no time to think, such as "hurry," "urgent" or "keep this confidential." Countermeasures include setting and publicizing a rule never to give out passwords by phone or email, and verifying the other party's identity by contacting them through contact details already known, not the ones they provided. Phishing is also a kind of social engineering, since it deceives people. Entering special strings into input fields is a technical attack such as SQL injection, and trying candidates one after another is a brute-force attack.