220-1102 Practice Question: A user receives a text message on their…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Vishing

  Vishing uses voice calls (VoIP), not text messages. This attack used SMS.

• ✗

  Spear phishing

  Spear phishing is a targeted email attack, not a text message attack.

• ✗

  Whaling

  Whaling targets high-profile executives, and while it could occur via text, the description does not indicate a high-value target.

Technical deep dive

How to think about this question

Smishing is a form of social engineering that specifically leverages SMS (Short Message Service) text messages to deceive individuals. In this scenario, the attack vector is explicitly stated as a 'text message on their company-issued smartphone,' which immediately points to smishing. The goal of smishing, much like other phishing variants, is to trick the recipient into performing an action that compromises their security, such as clicking a malicious link, downloading malware, or, as in this case, divulging sensitive credentials like usernames and passwords. The attacker impersonates a trusted entity, the IT department, to lend credibility to the urgent request for credential verification, exploiting the user's trust and fear of account deactivation. The mechanical process involves sending a crafted text message with a URL that, when clicked, directs the user to a fake login page designed to capture their input. This direct use of SMS as the primary communication channel is the defining characteristic that differentiates smishing from other social engineering techniques. The scenario's explicit mention of a 'text message' is the critical constraint that makes smishing the unequivocally correct answer, as it precisely matches the definition of this attack type. The user's subsequent action of clicking the link and entering credentials confirms the success of the smishing attempt.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…