CompTIA Security+ All-in-One Exam Guide, Fourth Edition (Exam SY0-401), 4th Edition

CHAPTER 13

Social Engineering

In this chapter, you will

     •   Define basic terminology associated with social engineering

     •   Identify common user actions that may put an organization’s information at risk

     •   Recognize methods attackers may use to gain information about an organization

     •   Examine risks associated with virtualization and cloud environments

Social engineering is the process of convincing an authorized individual to provide confidential information or access to an unauthorized individual. It is a technique in which the attacker uses various deceptive practices to convince the targeted person to divulge information they normally would not divulge or to convince the target of the attack to do something they ...