Which of the following is listed as a common target among social engineering scenarios?

• A. Receptionists
• B. Users
• C. Vendors Of Target Org
• D. System Administrators

Answer: (C)

Social engineering hinges on exploiting trust and trusted channels to gain access or information. Vendors of the target organization are a frequent target because they serve as an external, legitimate bridge into the company. They routinely have access to premises, systems, or sensitive processes, and staff may rely on them to perform trusted tasks. An attacker can impersonate a vendor, manipulate vendor communications, or trick employees into divulging credentials or making changes—ways that are often easier than convincing internal personnel to bypass controls. That trusted access and ongoing relationship make the vendor channel a common pathway for social-engineering campaigns, which is why this option is the best fit.

Receptionists and users are indeed common targets because they are on the front line and hold or gate access to information and facilities. System administrators are high-value targets for privilege escalation. However, vendors uniquely provide an external, trusted route into the organization, which attackers frequently exploit to achieve broader impact.