220-1102 Practice Question: A technician finds a USB flash drive in the…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Tailgating

  Tailgating involves unauthorized entry by following an authorized person; not related to devices.

• ✗

  Phishing

  Phishing is typically an electronic message (email, text) designed to trick the recipient.

• ✗

  Pretexting

  Pretexting involves creating a fabricated scenario to obtain information; but the attack here is based on a physical object, not a scenario.

Technical deep dive

How to think about this question

Baiting is a social engineering attack that leverages human curiosity, greed, or a desire for convenience to trick victims into performing an action that compromises security. In this scenario, the USB flash drive labeled '2025 Bonus Information' acts as the 'bait.' The attacker intentionally leaves the device in a public or semi-public area, such as a parking lot, knowing that someone will likely pick it up and, driven by curiosity or the perceived value of the information, plug it into a computer. Once the device is connected, it can automatically execute malicious code, install malware, or create a backdoor, as described by the workstation behaving erratically and security alerts. This method bypasses traditional network security measures by introducing the threat directly via a physical vector. The critical distinction here is the physical delivery mechanism and the appeal to curiosity or potential reward. Unlike phishing, which relies on electronic communication, baiting uses a physical object. It also differs from pretexting, which involves an elaborate fabricated story to manipulate the victim into divulging information or performing an action, but typically doesn't involve a physical, malware-laden object as the primary attack vector. Tailgating, on the other hand, is purely about unauthorized physical access to a secure area and has no direct relation to digital devices or malware infection in this context. The 'bonus information' label is specifically designed to make the drive irresistible, exploiting the technician's natural inclination to investigate something that promises personal gain, thereby making baiting the precise description of this attack.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…