220-1102 Practice Question: Phishing uses deceptive emails to trick users.

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Ransomware

  Ransomware is a type of malware that encrypts files, but the attack described is the delivery mechanism (phishing with macro), not the specific malware type.

• ✗

  Spear phishing

  Spear phishing is a targeted form of phishing aimed at a specific individual or organization. The email described is a generic bank fraud alert, not necessarily targeted.

• ✗

  Vishing

  Vishing (voice phishing) uses phone calls, not email attachments.

Technical deep dive

How to think about this question

The scenario perfectly illustrates a phishing attack leveraging a malicious macro. Phishing is a social engineering technique where attackers attempt to trick users into revealing sensitive information or performing actions, often by impersonating a trusted entity like a bank. In this case, the email's content, warning about a fraudulent transaction, is designed to create urgency and panic, compelling the user to open the attachment without critical thought. The attachment, 'Statement.docm', is crucial here. The '.docm' file extension indicates a Microsoft Word document that contains macros. Macros are small programs or scripts embedded within documents to automate tasks. While legitimate for productivity, they are a common vector for malware delivery. When the user attempts to open such a document, if security settings allow, the embedded macro can execute, downloading and installing malware, in this case, a Trojan, which Windows Defender successfully intercepted. This attack differs significantly from the distractor options. Ransomware (B) is a type of malware that encrypts files and demands payment, but the question describes the *delivery mechanism* of the malware, not the malware's ultimate payload or effect. Spear phishing (C) is a more targeted form of phishing, aimed at a specific individual or organization with personalized information. The email described, a generic bank fraud alert, lacks the specific targeting characteristics of spear phishing. Vishing (D), or voice phishing, involves using phone calls to trick victims, which is distinct from an email-based attack with an attachment. Therefore, the combination of a deceptive email (phishing) and a macro-enabled document (malicious macro) accurately describes the prevented attack vector.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…