Question

What is phishing in cyber security?

• A. A method of encrypting sensitive data
• B. A social engineering attack to steal personal information
• C. A technique used for network penetration testing
• D. A way to remove malware from infected systems

Answer 1

The Correct Option is B

Phishing is a type of cyber attack in which attackers pretend to be a trusted person or organization to trick individuals into revealing sensitive information such as passwords, bank account details, credit card numbers, or personal data.

Let us examine each option:

Option (1): A method of encrypting sensitive data
Encryption is the process of converting data into a secure format to protect it from unauthorized access.
This is not phishing.

Option (2): A social engineering attack to steal personal information
Phishing is a social engineering attack in which attackers use fake emails, messages, or websites to deceive users into sharing confidential information.
Therefore, this is the correct answer.

Option (3): A technique used for network penetration testing
Penetration testing is an authorized security assessment used to identify system vulnerabilities.
It is not phishing.

Option (4): A way to remove malware from infected systems
Malware removal involves detecting and eliminating malicious software.
It is unrelated to phishing attacks.

Therefore, phishing is: \[ \boxed{\text{A social engineering attack to steal personal information}} \] Hence, the correct answer is Option (2) – A social engineering attack to steal personal information.