What is phishing?

• A. A method of securing networks
• B. A type of social engineering attack
• C. An encryption technique
• D. A form of data backup

Answer: (B)

Phishing is categorized as a type of social engineering attack designed to trick individuals into divulging sensitive information such as usernames, passwords, credit card numbers, or other confidential data. It generally involves deceptive emails or websites that appear to be from legitimate sources, prompting the target to take action, such as clicking on a link or providing personal information. The attacker manipulates the victim's trust and creates a sense of urgency or fear to increase the likelihood of a successful breach of information.

The other options do not accurately describe phishing. For example, securing networks involves different practices, such as firewalls and intrusion detection systems, not deceptive tactics aimed at individuals. Encryption techniques pertain to the methods of encoding information to protect its confidentiality, which is unrelated to the deceptive aims of phishing. Lastly, data backup refers to the methods and processes of making copies of data to prevent loss, which does not involve the manipulation of individuals for information theft. Thus, framing phishing within the context of social engineering highlights its reliance on human interaction and deception as the primary mechanism of attack.