Which term describes an attacker who interacts with an employee in person to collect sensitive information?

• A. Human-Based Social Engineering
• B. Computer-Based Social Engineering
• C. Mobile-Based Social Engineering
• D. Vishing

Answer: (A)

In-person interaction to trick someone into revealing sensitive information relies on manipulating people directly rather than exploiting technology. This approach targets human behavior and trust, which is the essence of human-based social engineering. The attacker uses face-to-face pretext, impersonation, or other social tricks to coax credentials or data from the employee.

The other terms describe different avenues of social engineering: computer-based targets systems or software through digital exploits; mobile-based uses phones or mobile apps; vishing is specifically voice phishing conducted over the telephone, not in person. The scenario described fits best with human-based social engineering because the key factor is direct, personal interaction aimed at extracting information.