220-1102 Practice Question: A user receives a phone call from someone…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Phishing

  Phishing typically occurs via email or text, not a phone call.

• ✗

  Smishing

  Smishing uses SMS messages, not phone calls.

• ✗

  Pretexting

  Pretexting involves creating a fabricated scenario to obtain information, but it often occurs in person or via email, and the direct solicitation of a password over the phone is more specifically vishing.

Technical deep dive

How to think about this question

The scenario describes a classic example of vishing, which is a portmanteau of 'voice' and 'phishing.' It specifically refers to social engineering attacks conducted over the phone where an attacker impersonates a trusted entity, such as a company's help desk, to trick the victim into revealing sensitive information. In this case, the attacker's claim of a compromised account and the immediate need for a password reset, coupled with the request for the current password, are common tactics used in vishing to create a sense of urgency and panic, bypassing the victim's critical thinking. The key differentiator here is the medium of communication: a live phone call, which distinguishes it from other forms of social engineering. While pretexting involves creating a believable fabricated scenario to manipulate a victim, vishing is a specific *delivery method* of pretexting that occurs exclusively over the phone. The direct request for a password over the phone, under the guise of a help desk, is the hallmark of vishing. Phishing, on the other hand, is a broader term for social engineering via electronic communication, but it primarily refers to email-based attacks. Smishing is specifically phishing conducted via SMS text messages. Therefore, the direct, real-time voice interaction to solicit sensitive credentials makes vishing the most accurate classification for this particular attack.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…