Human And Social Engineering Vectors for Security+
Short answer
Human vectors use the target's trust, routine, urgency, curiosity, fear, or authority response as the route. The same channel can support different social engineering labels. An email can be ordinary message-based delivery, phishing, BEC, brand impersonation, or pretexting depending on what the scenario emphasizes. If the clue is simply the channel, classify the channel. If the clue emphasizes deception technique, classify the social engineering vector.
Why it appears on the exam
SY0-701 2.2: Differentiate phishing, vishing, smishing, impersonation, BEC, pretexting, watering holes, brand impersonation, typosquatting, and misinformation as human-centered vectors.
Key concepts
Concept 1
How Human And Social Engineering Vectors works
Human vectors use the target's trust, routine, urgency, curiosity, fear, or authority response as the route. The same channel can support different social engineering labels. An email can be ordinary message-based delivery, phishing, BEC, brand impersonation, or pretexting depending on what the scenario emphasizes. If the clue is simply the channel, classify the channel. If the clue emphasizes deception technique, classify the social engineering vector.
Example
A text message claims a package is delayed and asks the user to sign in. The vector is smishing.
Concept 2
Common confusion
Learners often choose the communication channel when the prompt is asking for the deception pattern. Email, SMS, and voice call are delivery channels. Phishing, smishing, vishing, BEC, impersonation, pretexting, watering hole, brand impersonation, typosquatting, and misinformation/disinformation describe the human-centered technique or trust abuse.
Example
A caller claims to be from the help desk and pressures a user to approve a login. The vector is vishing, with impersonation as a supporting clue.
Concept 3
What to recognize
Match a scenario to phishing, vishing, smishing, BEC, pretexting, impersonation, watering hole, brand impersonation, typosquatting, or misinformation/disinformation; Distinguish channel clues from technique clues; Choose the most specific fair label when multiple labels apply, such as BEC over generic phishing for a payment-change email; Explain why human trust or deception makes the path a vector.
Example
An email appears to come from the CFO and requests an urgent wire transfer to a new account. The best label is business email compromise (BEC).
Sample questions
Select an answer to reveal the explanation. For tracked practice and weak-area review, use the Cultiv8 app.
Q1.On the exam, this detail appears: A text message claims a package is delayed and asks the user to sign in. The vector is smishing. Which answer matches it?
Q2.A Security+ scenario centers on Human And Social Engineering Vectors. Which answer is the closest lesson match?
Q3.A Security+ scenario about Human And Social Engineering Vectors looks similar to a nearby topic. What should you do before choosing an answer?
Practice this lesson in Cultiv8
The app adds tracked practice, targeted remediation, saved session history, and future readiness scoring.
Continue in Cultiv8