Ethical Hacking Essentials Practice Test

What behavior does a threat actor exhibit when they fabricate a story to trick someone into providing sensitive information?

1. Deception

2. Intimidation

3. Authority

4. Manipulation

The correct answer is: Deception

The behavior described in the question is best categorized as deception. Deception involves misleading someone to achieve a particular outcome, such as tricking them into divulging sensitive information. This type of behavior is often associated with various social engineering tactics, where the attacker creates a fabricated story or scenario to exploit the trust of the target. By presenting false information convincingly, the threat actor aims to manipulate the perspective and reactions of the victim, leading them to make choices they otherwise might not. While manipulation also plays a role in social engineering, it is a broader term that encompasses various ways to influence individuals' behaviors or decisions, often without the explicit use of falsehoods. Deception, on the other hand, specifically focuses on the act of providing false information with the intent to mislead, making it a more precise term for the behavior exhibited in this scenario. Intimidation and authority could be tactics used by threat actors, but they do not directly involve the fabrication of a story to mislead someone. Hence, deception is the most appropriate term here.