Which of the following is the act of obtaining a password or other confidential information from a person within an organization by using unauthorized means such as feigning an emergency situation?

Social engineering is the act of manipulating a person inside an organisation into revealing a password or confidential data, often by faking an emergency to pressure them.

It exploits human trust and helpfulness rather than any flaw in the computer system.

A trojan horse is malicious software disguised as a harmless program that the user is tricked into installing.

Password cracking is the technical guessing or computing of a password, not persuading a person to reveal it.

A stepping-stone attack routes an intrusion through one already-compromised computer to reach another and hide the source.

Because it targets people, staff awareness training and verification procedures are the main defence against social engineering.