Which of the following is NOT listed as a type of social engineering?

• A. Human-based
• B. Phishing
• C. Computer-based
• D. Mobile-based

Answer: (B)

The idea behind this question is distinguishing between broad delivery channels for social engineering and specific tactics. Social engineering is often grouped by how the deception is delivered: human-based (in-person manipulation), computer-based (through computers and digital communications), and mobile-based (via mobile channels). Phishing, though, is a specific tactic that uses fraudulent electronic messages to trick victims and typically falls under the computer-based category rather than being a separate, broad type itself. So in that taxonomy, phishing isn’t listed as its own type; it’s a technique you’d encounter within the computer-based channel. The other options describe broad delivery channels, which is why phishing is the best choice for not being listed as a type.