Which of the following is an example of social engineering?

• A. VPN usage
• B. Phishing
• C. Antivirus scanning
• D. Regular backups

Answer: (B)

Social engineering relies on manipulating people rather than exploiting technical weaknesses. Phishing fits this approach because it uses messages that look like they’re from a trusted source to trick you into revealing passwords, clicking malicious links, or performing actions that compromise security. It exploits human behaviors—trust, urgency, authority—rather than a flaw in software.

The other options are defensive or technical safeguards: using a VPN protects data in transit, antivirus scanning detects and blocks malware, and regular backups ensure data can be restored after an incident. These are about securing systems and data, not deceiving people into handing over information.