Phishing is a form of which security threat?

• A. Computer-based Social Engineering
• B. Identity theft
• C. Hacking
• D. Impersonation

Answer: (A)

Phishing exploits human psychology rather than technical weaknesses, so it’s a case of social engineering. It becomes computer-based when that deception travels through electronic channels like email, fake websites, or messaging over networks to trick people into revealing credentials or clicking malicious links. In short, phishing is a form of computer-based social engineering because the attacker manipulates people via digital communications to breach security.

It’s not identity theft on its own—identity theft is the outcome that can result from phishing, but the technique is the manipulative act. It isn’t hacking, which involves breaking into systems through technical exploits. And while impersonation is often used in phishing, the overarching threat category remains social engineering conducted through computers.