220-1102 Practice Question: A user receives an email with an attachment…

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Answer analysis

Why the other options are wrong

Understanding why incorrect options are tempting is as important as knowing the correct answer.

• ✗

  Spear phishing

  Spear phishing is a targeted attack aimed at a specific person or group; this scenario does not indicate targeting beyond a generic invoice lure.

• ✗

  Whaling

  Whaling specifically targets high-level executives; there is no evidence the recipient is an executive.

• ✗

  Vishing

  Vishing (voice phishing) uses phone calls, not email.

Technical deep dive

How to think about this question

Phishing is a widespread social engineering technique that relies on deception, typically through email, to trick recipients into performing actions that compromise their security. In this scenario, the email attempts to impersonate a legitimate entity (Amazon) by using a slightly altered domain name ('amaz0n-billing.com' instead of 'amazon.com') and a common lure (an invoice). The core mechanism involves creating a sense of urgency or curiosity to prompt the user to interact with a malicious element, in this case, opening a ZIP attachment that likely contains malware or a link to a fraudulent website. The broad, untargeted nature of this attack, relying on a common theme that could apply to many users, is characteristic of general phishing. The attacker isn't demonstrating prior knowledge of the user's specific Amazon account details or role, but rather casting a wide net hoping someone falls for the generic 'invoice' ploy. This differs significantly from the distractor options. Spear phishing would involve a more personalized approach, perhaps referencing a specific recent Amazon order or using the user's name in a more convincing way, indicating the attacker has done some reconnaissance. Whaling is a highly specialized form of spear phishing directed exclusively at high-value targets like CEOs or CFOs, which is not suggested by the generic 'invoice' email. Vishing, on the other hand, is entirely distinct as it utilizes voice communication (phone calls) rather than email to carry out the social engineering attack. The presence of an email with an attachment immediately rules out vishing.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

Keep practising

More 220-1102 practice questions

• →A change advisory board (CAB) approved a standard change to update antivirus definitions on all servers. The technician…
• →A company's change management policy requires all server changes to be approved by the Change Advisory Board (CAB). A te…
• →A company is implementing a bring-your-own-device (BYOD) policy and needs to ensure that corporate data on employee mobi…
• →A company requires employees to present both a smart card and a PIN to log into their workstations. Which authentication…
• →A company requires all Windows 10 workstations to be able to join an Active Directory domain. Which edition of Windows 1…
• →A company wants to allow employees to securely access internal resources from home via the internet. Which method provid…