Basic security questions used to reset a password are susceptible to which form of attack?

Basic security questions used to reset a password are particularly vulnerable to social engineering attacks. Social engineering involves manipulating individuals into divulging confidential or personal information, often by exploiting human psychology and social interactions.

When users select security questions, they may choose answers that are easily discoverable or guessable, such as their mother's maiden name, the name of their first pet, or the city where they were born. Attackers can gather this information through social media, public records, or even casual conversations, enabling them to impersonate the individual and gain unauthorized access to accounts.

This risk highlights the importance of selecting security questions and answers that are not easily accessible or known to others, as well as considering alternative methods for authentication that provide better security.