220-1102 Practice Question: A user receives a phone call from someone…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Pretexting

  Pretexting is a general term where an attacker fabricates a scenario to obtain information, but vishing is a more specific form that uses voice calls. Pretexting can also occur via email or in person.

• ✗

  Phishing

  Phishing typically refers to fraudulent emails or websites designed to steal credentials. The attack here was initiated by phone call, not email.

• ✗

  Shoulder surfing

  Shoulder surfing involves looking over someone's shoulder to obtain information like passwords. This attack did not involve physical observation.

Technical deep dive

How to think about this question

Vishing, a portmanteau of 'voice' and 'phishing,' specifically describes social engineering attacks conducted over the telephone. In this scenario, the attacker leveraged a phone call to impersonate a trusted entity (IT help desk) and create a sense of urgency, a common tactic in vishing. The goal was to manipulate the user into taking an action that compromises security, in this case, installing remote desktop software and granting access. This direct voice interaction distinguishes it from other forms of social engineering, as the attacker relies on real-time conversation to build rapport, apply pressure, and overcome immediate skepticism. The critical aspect making vishing the correct answer is the medium of communication: a phone call. While the attacker used a fabricated scenario, which is a component of pretexting, vishing is a more precise classification when the pretext is delivered via voice. Phishing, by contrast, is primarily associated with email or malicious websites. The attacker's objective was to gain unauthorized access to the user's system by tricking them into installing software, a direct result of the verbal manipulation during the phone call. This real-time, interactive deception over the phone is the hallmark of a vishing attack, making it distinct from passive methods like shoulder surfing or email-based phishing.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…