FC0-U71 Security Practice Question
An employee calls the help desk claiming to be a manager from another department and requests a password reset. This is an example of which social engineering technique?
⚠ Common exam trap
FC0-U71 often tests the distinction between pretexting (fabricated scenario/identity) and phishing (fraudulent email/message), so candidates who see 'phone call' and jump to phishing miss that the core deception is the invented pretext.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Pretexting
Pretexting is a social engineering technique where an attacker invents a fabricated scenario (a pretext) — such as impersonating a manager from another department — to manipulate a victim into divulging information or performing an action like a password reset. The key element is the false identity and fabricated context used to gain trust. Because the caller claims to be a manager requesting a password reset, this is a textbook pretexting attack.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Baiting
Why it's wrong here
Baiting offers something enticing, such as a USB drive or download, to lure a victim. This scenario is pretexting, where a fabricated identity or story is used to gain trust, so baiting does not match the impersonation described.
- ✓
Pretexting
Why this is correct
Pretexting involves inventing a fabricated scenario or false identity to manipulate a victim into complying. Claiming to be a manager from another department establishes that invented pretext, exploiting the employee's deference to authority to obtain an unauthorised password reset.
- ✗
Tailgating
Why it's wrong here
Tailgating requires physical proximity: following an authorised person through a secured door. The caller never enters the building, so no physical access control is bypassed. It is tempting because tailgating is a real social engineering technique, and would be correct if the attacker gained entry to a restricted area behind an employee.
- ✗
Phishing
Why it's wrong here
Phishing is delivered through electronic messages such as email, SMS or fraudulent sites, not a live voice call. The scenario describes real-time verbal manipulation, which is vishing. Phishing would be correct if the attacker sent a deceptive email or link rather than telephoning the help desk directly.
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.