A user receives a call from someone who claims to be part of the IT department. The IT caller instructs the user to provide the IP address of the user's computer. Which of the following actions…

The correct answer is C. Contact the IT department for confirmation. This scenario describes a potential social engineering (vishing) attempt, but the user cannot be certain without verification. The correct response is to contact the IT department directly - using a known, trusted channel such as the official helpdesk number or ticketing system…

Networking

Question

A user receives a call from someone who claims to be part of the IT department. The IT caller instructs the user to provide the IP address of the user's computer. Which of the following actions should the user take NEXT?

Options

AAssume a social engineering attack and disconnect
BProvide the caller with the information requested
CContact the IT department for confirmation
DReceive advice from a coworker on the situation

How the community answered

(27 responses)

A
4% (1)
C
89% (24)
D
7% (2)

Explanation

This scenario describes a potential social engineering (vishing) attempt, but the user cannot be certain without verification. The correct response is to contact the IT department directly - using a known, trusted channel such as the official helpdesk number or ticketing system - to confirm whether a legitimate IT staff member made the call and actually needs the information. Immediately disconnecting (A) is premature if the caller is legitimate. Providing the information (B) before verification violates security policy and could expose the network. Asking a coworker (D) provides no authoritative confirmation. Verification with the actual IT department is always the right step before sharing any information with an unconfirmed caller.

Topics

#social engineering#security awareness#identity verification#IT security

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice