220-1102 Practice Question: A user receives a phone call from someone…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Phishing

  Phishing typically involves fraudulent emails or websites to obtain sensitive information, not phone calls. This attack used a phone call.

• ✗

  Vishing

  Vishing (voice phishing) uses phone calls to trick victims into providing sensitive information, but it often involves automated messages or fear tactics. This attack used a human caller with a detailed pretext, fitting pretexting more precisely.

• ✗

  Tailgating

  Tailgating involves an unauthorized person following an authorized person into a restricted area. It does not involve phone calls or direct request for passwords.

Technical deep dive

How to think about this question

Pretexting is a sophisticated form of social engineering where an attacker creates a fabricated scenario, or 'pretext,' to manipulate a victim into divulging sensitive information or performing an action. In this specific scenario, the attacker meticulously crafted a believable story about being from the IT help desk conducting a security audit. They enhanced the credibility by using the user's name and department, which implies prior reconnaissance, making the story more convincing and reducing the victim's skepticism. The core mechanic of pretexting is the establishment of a false sense of authority or urgency through a well-developed narrative, which then allows the attacker to directly request information, like a password, that would otherwise be refused. The professional demeanor and specific details provided by the caller are hallmarks of a successful pretext. This differs significantly from phishing, which primarily uses email or malicious websites, and tailgating, which is a physical security breach. While vishing also uses phone calls, it often relies on more generic fear tactics or automated systems, whereas pretexting involves a more elaborate, human-driven narrative designed to build trust and legitimacy for a specific, targeted information request.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…