220-1102 Practice Question: A user receives an email that appears to be from…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Vishing

  Vishing is a social engineering attack conducted over the phone, not via email.

• ✗

  Tailgating

  Tailgating involves following an authorized person into a restricted area without permission, not an email-based attack.

• ✗

  Phishing

  While this is a type of phishing, 'spear phishing' is more accurate because the attack targets a specific individual and uses a personalized pretext.

Technical deep dive

How to think about this question

Spear phishing represents a highly targeted form of social engineering, distinguishing itself from broader phishing attempts by focusing on specific individuals or organizations. In this scenario, the attacker meticulously crafted an email to appear from the company's CEO, a position of authority, and directed it at a particular user. The use of a lookalike domain, 'cornpany.com' instead of 'company.com', is a classic tactic in spear phishing to enhance credibility and bypass basic email filters, making the deception more convincing to the recipient. The request for gift cards, a common method for quick, untraceable financial gain, further solidifies this as a spear phishing attack, as it's a personalized request designed to exploit the victim's trust and sense of urgency or duty towards a superior. The attack is not merely a generic attempt to trick anyone; it leverages the perceived relationship between the CEO and the employee, making it highly specific and tailored. This level of personalization and targeting is the defining characteristic that elevates it beyond a general phishing attack, which typically casts a wider net with less specific pretexts.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…