200-201 Question #179: Real Exam Question with Answer & Explanation

Question

Which event is a vishing attack?

Options

• Aobtaining disposed documents from an organization
• Busing a vulnerability scanner on a corporate network
• Csetting up a rogue access point near a public hotspot
• Dimpersonating a tech support agent during a phone call

Explanation

A vishing attack is a form of social engineering that uses voice communication, such as a phone call, to trick individuals into revealing sensitive information or performing actions.

Common mistakes.

• A. Obtaining disposed documents from an organization, known as dumpster diving, is a physical social engineering technique, not a voice-based attack.
• B. Using a vulnerability scanner on a corporate network is a technical reconnaissance activity to identify security weaknesses, not a social engineering attack involving voice.
• C. Setting up a rogue access point is a network-based attack designed to intercept wireless traffic or lure users to connect to a malicious network, rather than a voice-based social engineering attack.

Concept tested. Social engineering - vishing

Reference. https://learn.microsoft.com/en-us/microsoft-365/compliance/phishing-scams-recognize-and-protect-yourself

No community discussion yet for this question.