220-1102 Practice Question: Vishing uses phone calls as the attack vector.

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Smishing

  Smishing uses SMS text messages to carry out the attack.

• ✗

  Tailgating

  Tailgating is a physical security attack where an unauthorized person follows an authorized person into a secure area.

• ✗

  Phishing

  Phishing typically uses email messages to trick users.

Technical deep dive

How to think about this question

Vishing, a portmanteau of 'voice' and 'phishing,' is a social engineering technique that leverages telephone calls to manipulate individuals into divulging confidential information or performing actions that compromise security. In this scenario, the attacker uses a phone call, impersonating a legitimate IT help desk representative, to create a sense of urgency and authority. The request for login credentials under the guise of a 'critical security update' is a classic vishing tactic, exploiting trust and the user's desire to maintain system security. The mechanical aspect involves the attacker initiating a voice communication, often using spoofed caller IDs to appear legitimate, and then employing persuasive language and social engineering principles to extract the desired information directly from the victim over the phone. The specific scenario constraints that make vishing the correct choice are explicitly stated: 'A user receives a phone call.' This direct mention of a phone call immediately differentiates it from other forms of social engineering that rely on different communication mediums. Phishing, while conceptually similar in its goal of deception, specifically uses email as its primary vector. Smishing, another related term, is exclusively carried out via SMS text messages. Tailgating, on the other hand, is a physical security breach, completely unrelated to digital communication or credential theft in this manner, involving unauthorized entry into a secure physical space by following an authorized person.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…