Identify a common indicator of social engineering attempts.

• A. A routine system update schedule.
• B. Requests for sensitive information via phone or email.
• C. A clearly verified caller ID with no pressure.
• D. Internal policy letters.

Answer: (B)

Social engineering hinges on exploiting human trust to obtain secrets. A common indicator is requests for sensitive information via phone or email, especially when there’s urgency or pressure. Legitimate organizations rarely ask for passwords, security codes, or financial details through these channels, so such requests should be treated with skepticism and verified through a separate, known contact method. Routine updates or internal policy letters can be normal communications, and a caller ID that seems legitimate isn’t a sure sign of safety since IDs can be spoofed or misrepresented.