The correct answer is Tricking people into revealing passwords and sensitive information via fake emails or cloned websites.

This choice describes phishing because attackers impersonate trusted senders and create fraudulent websites or messages to harvest credentials and other sensitive data. Phishing relies on deception and user interaction so it succeeds by convincing people to take an action that reveals secrets or installs malware.

Deploying biometric locks and other physical access controls is incorrect because it describes physical security measures to prevent unauthorized entry and not deceptive communications or credential harvesting.

Architecting network topologies to improve security and traffic segmentation is incorrect because it refers to network design and segmentation to limit exposure and lateral movement rather than tricking users into divulging information.

Using encryption to protect data while it moves between systems is incorrect because encryption protects data in transit to ensure confidentiality and integrity and it does not involve impersonation or social engineering to obtain credentials.

Full AWS Practitioner Certification Question