CompTIA PenTest+ Practice Test

What term describes the act of impersonating another individual to gather data through deception or social engineering?

1. Phishing

2. Elicitation

3. Impersonation

4. Masquerading

The correct answer is: Impersonation

The term 'impersonation' specifically refers to the act of pretending to be someone else, often with the intent of deceiving others to gather sensitive data or information. This practice typically involves assuming the identity of another individual, which can be executed in various ways, such as through direct interactions or online communications. In social engineering, impersonation is often used to manipulate individuals into divulging confidential information by leveraging trust or authority associated with the impersonated person. While phishing involves tricking individuals into providing personal information, it typically occurs through deceptive electronic communications rather than direct impersonation. Elicitation, on the other hand, refers to subtly obtaining information from individuals without them realizing it, rather than directly impersonating someone else. Masquerading may overlap with impersonation in some contexts as it implies taking on a false identity, but it can also refer more broadly to any situation where an attacker disguises their true identity, not necessarily to impersonate a specific individual. Therefore, 'impersonation' is the most accurate term in this context.