220-1102 Practice Question: A user receives an email that appears to be from…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Spear phishing

  Spear phishing is a targeted attack aimed at a specific individual or organization, often using personalized information. This scenario describes a generic email, not a personalized one.

• ✗

  Whaling

  Whaling is a type of spear phishing that targets senior executives or high-value individuals. The email in this scenario is not specifically targeting executives.

• ✗

  Vishing

  Vishing (voice phishing) uses phone calls rather than email. This attack was initiated via email.

Technical deep dive

How to think about this question

Phishing is a broad category of social engineering attacks that typically involve sending a large volume of fraudulent communications, often emails, designed to trick recipients into revealing sensitive information like login credentials, credit card numbers, or other personal data. In this scenario, the email appears to be from a trusted source (the company's IT department) and creates a sense of urgency (password expiring in 24 hours) to prompt immediate action. The crucial element is the redirection to a fake login page with a slightly altered URL, which is a classic phishing tactic to harvest credentials. The attack's success relies on the user's trust in the sender and their failure to scrutinize the URL before entering information. The distinguishing factor here is the non-targeted nature of the initial email. While it's sent to a user within a company, the prompt for a password reset is a common, generic lure that could be sent to many individuals without prior research into their specific roles or personal details. This contrasts with spear phishing, which would involve a more personalized email, perhaps referencing a specific project or colleague to build greater credibility. Whaling is a further refinement of spear phishing, specifically targeting high-value individuals like executives, which is not indicated in this general scenario. Vishing is entirely different, relying on voice communication rather than email, making it irrelevant to this email-based attack.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…