200-201 · Question #179
Which event is a vishing attack?
The correct answer is D. impersonating a tech support agent during a phone call. A vishing attack is a form of social engineering that uses voice communication, such as a phone call, to trick individuals into revealing sensitive information or performing actions.
Question
Which event is a vishing attack?
Options
- Aobtaining disposed documents from an organization
- Busing a vulnerability scanner on a corporate network
- Csetting up a rogue access point near a public hotspot
- Dimpersonating a tech support agent during a phone call
How the community answered
(67 responses)- A1% (1)
- B6% (4)
- C3% (2)
- D90% (60)
Why each option
A vishing attack is a form of social engineering that uses voice communication, such as a phone call, to trick individuals into revealing sensitive information or performing actions.
Obtaining disposed documents from an organization, known as dumpster diving, is a physical social engineering technique, not a voice-based attack.
Using a vulnerability scanner on a corporate network is a technical reconnaissance activity to identify security weaknesses, not a social engineering attack involving voice.
Setting up a rogue access point is a network-based attack designed to intercept wireless traffic or lure users to connect to a malicious network, rather than a voice-based social engineering attack.
Vishing is a type of social engineering attack that specifically uses voice communication, typically telephone calls, to impersonate a trusted entity like a tech support agent to trick victims into divulging sensitive information or performing actions.
Concept tested: Social engineering - vishing
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/phishing-scams-recognize-and-protect-yourself
Topics
Community Discussion
No community discussion yet for this question.