A social engineer is communicating, whether directly or indirectly, a lie or half-truth in order to get someone to believe a falsehood. What is this tactic called?

• A. Pretexting
• B. Phishing
• C. Baiting
• D. Quid pro quo

Answer: (A)

This item tests social engineering that uses deception by presenting a fabricated role or story to manipulate a target. The tactic is called pretexting, where the attacker creates a believable pretext—an assumed identity or scenario—and uses it to persuade the target to reveal information or take action. The lie or half-truth is designed to appear legitimate, increasing the likelihood the target will comply. Phishing typically involves unsolicited messages that trick someone into clicking a link or entering credentials, rather than maintaining a fabricated personal role in conversation. Baiting relies on offering a tempting item to lure the victim, not necessarily a crafted identity. Quid pro quo involves promising something in exchange for information. Pretexting uniquely emphasizes the crafted identity or scenario used to gain trust and obtain sensitive data.