Which of the following is a type of cyber attack that involves tricking users into revealing sensitive information?

The correct answer is (A) Phishing attack.

• Phishing is a malicious form of social engineering where attackers impersonate legitimate organizations or trusted entities through electronic communications—predominantly deceptive emails or fraudulent websites—to trick unsuspecting users into divulging sensitive information such as login credentials, credit card numbers, and personal identification numbers.
• In the context of cybersecurity and the Information Technology (IT) framework, phishing represents a critical human-layer vulnerability that bypasses technical security controls by exploiting psychological manipulation rather than software bugs.
• Option (B) SQL Injection is a code injection technique that exploits security vulnerabilities in an application's database layer; Option (C) Denial of Service (DOS) is an attack aimed at making a machine or network resource unavailable to its intended users; therefore, options (B) and (C) are incorrect as they do not involve tricking users into revealing sensitive information through social engineering.