Your company is instituting a new security awareness program. You are responsible for educating end users on a variety of threats, including social engineering. Which of the following best defines social engineering? a. Destruction or alteration of datab. Gathering information from discarded manuals and printoutsc. Illegal copying of softwared. Using people skills to obtain proprietary information

D

Explanation:

Social engineering is a way of manipulating people into releasing confidential information or data which may then be used by the recipient for fraudulent purpose. These data or information could be in form of password or one's bank details.

D. Using people Skills to Obtain Proprietary Information

Explanation:

Social Engineering represents an aspect of information security or social sciences.

In Information Security, Social Engineering is involved in the use of psychological means to get people to give away crucial personal information or even perform certain options.

It also goes even beyond the field of information security into fields such as social science where it also represents the use of psychological skills among others to manipulate people to give information about themselves or others, commit a fraud or access a secure system.

Based on these definitions, one thing is that people skills are involved most often social and psychological skills and personal, confidential, secret or proprietary information are also involved. Social engineering manipulates the first to access the second