220-1102 Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Phishing

  Why it's wrong here

  Phishing is a social engineering technique that primarily uses electronic messages like email or fraudulent websites to trick victims into revealing sensitive information or clicking malicious links. While vishing is a form of phishing that uses voice, the term "phishing" by itself refers to the broader electronic attack vector, not the phone call described in the scenario. Since the attack here is specifically via an unsolicited phone call, vishing is the more precise and correct classification.

• ✓

  Vishing

  Why this is correct

  Vishing, or voice phishing, is a social engineering attack conducted over the phone where an attacker impersonates a trusted person or organization, such as a tech support agent or bank representative, to manipulate the victim into divulging confidential information, performing financial transactions, or granting remote access to their system. The scenario directly matches this definition: an unsolicited call from someone posing as a legitimate authority with a likely goal of obtaining credentials or access. Because the attack uses real-time voice communication, vishing is the specific term that applies, distinguishing it from email-based phishing or other scams.

• ✗

  Impersonation

  Why it's wrong here

  Impersonation is a general social engineering concept where an attacker pretends to be someone else, and it can occur across many communication channels such as in-person, email, or phone. Although the caller is impersonating a technician, this answer is too broad; it does not capture the voice-specific nature of the attack. In the A+ Core 2 exam context, vishing is the precise threat vector for a phone-based impersonation attempt, making impersonation a less accurate answer.

• ✗

  Tailgating

  Why it's wrong here

  Tailgating, also known as piggybacking, is a physical security attack where an unauthorized individual follows an authorized person through a secured entrance, such as a badge-protected door, without using their own credentials. This attack relies on physical proximity and social courtesy to bypass access control, not on a phone call or digital communication. Since the user is receiving a phone call rather than being followed into a facility, tailgating is entirely unrelated to the described scenario.

Go deeper

Related to this question