Which of the following is a type of cyber-attack that involves tricking users into revealing sensitive information?

Question

UnlockIAS · Accepted Answer

Correct — A, Phishing attack. Phishing uses deceptive emails, messages, or fake websites that impersonate a trusted source to trick users into voluntarily revealing sensitive information such as passwords, OTPs, or card details.

Why the other options are wrong — (b) SQL Injection attacks a website's database by inserting malicious SQL code through input fields to extract or manipulate data directly — it exploits a coding flaw, not a user's trust, so it does not rely on 'tricking users'.  (c) A Denial-of-Service attack floods a server or website with fake traffic to make it unavailable to legitimate users — it disrupts access; it does not trick users into revealing information.  (d) Wrong — phishing is precisely this kind of attack, so 'none' is incorrect.

Concept: Cyber-attacks can be grouped by method: phishing is a social-engineering attack that tricks a human, SQL injection is a code-injection attack that exploits a database/application flaw, and a DoS attack is a traffic-flooding attack that denies service. MPPSC frequently tests which named attack matches which method.

State PCS 2023 Q44 — Science & Technology PYQ with Answer

State PCS 2023 Q44 — Science & Technology PYQ with Answer