A help desk analyst receives a phone call from someone claiming to be the CFO, who says their phone was lost while traveling and requests an immediate MFA reset and temporary bypass for payroll access. The caller knows the CFO's last name and the company name, but cannot answer the callback verification question. What attack technique is most likely being used?

Phishing

Phishing usually relies on email or similar written messages, not a direct voice call to the help desk.

Baiting

Baiting depends on an enticing item or reward, such as a USB drive or fake download, which is not present here.

Watering hole attack

A watering hole attack compromises a website the target commonly visits, rather than impersonating a person by phone.

What does this SY0-701 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Vishing — The best answer is vishing because the attacker is conducting a social engineering attempt by phone and is trying to exploit urgency and authority to bypass normal authentication controls. The fact that the caller knows some insider details does not make it legitimate; attackers often gather those details from public sources or previous breaches. Help desk staff should follow callback procedures and approved identity verification steps before making any MFA changes. Why others are wrong: Phishing is the broader email-based or message-based category, not the best fit for a live phone call. Baiting relies on a tempting item or lure, such as a malicious USB drive or fake file download. Watering hole attacks involve compromising a website that the target group already visits, which is unrelated to this help desk impersonation attempt.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.