What types of attacks are commonly categorized under social engineering?

Social engineering attacks manipulate individuals into divulging confidential or personal information by exploiting psychological tactics. The correct choice encompasses a range of techniques commonly used in social engineering.

Phishing is a prevalent tactic where attackers impersonate trustworthy entities to trick individuals into revealing sensitive information, such as usernames and passwords. Pretexting involves creating a fabricated scenario to obtain personal information under the guise of legitimate reasoning. Baiting entices victims by offering something alluring, often leading them to download malware or divulge information. Tailgating is a physical social engineering technique where an unauthorized person follows an authorized individual into a restricted area, exploiting the trust and lack of vigilance of the authorized individual to gain access.

These tactics highlight the essence of social engineering—manipulating human behavior rather than exploiting technical vulnerabilities directly, which distinguishes them from options that focus on technical exploits or denial-of-service type incidents.