FC0-U61 · Question #692
A user from the accounting department received a call asking for hardware and software information. To which of the following is this user being exposed?
The correct answer is B. Impersonation. The user is being exposed to impersonation, as the attacker is pretending to be someone else to elicit sensitive information over the phone.
Question
A user from the accounting department received a call asking for hardware and software information. To which of the following is this user being exposed?
Options
- AEavesdropping
- BImpersonation
- CPhishing
- DWhaling
How the community answered
(50 responses)- A2% (1)
- B94% (47)
- C4% (2)
Why each option
The user is being exposed to impersonation, as the attacker is pretending to be someone else to elicit sensitive information over the phone.
Eavesdropping is secretly listening to a private conversation without consent, which is not what is happening when a direct request for information is made.
Impersonation involves an attacker assuming the identity of another person, often a trusted authority or colleague, to gain unauthorized access to information or systems. In this scenario, the caller is impersonating someone authorized to request hardware and software information.
Phishing typically involves fraudulent emails or messages attempting to trick recipients into revealing personal information or clicking malicious links.
Whaling is a specific type of phishing attack targeting high-profile individuals, such as CEOs or senior executives.
Concept tested: Social engineering - Impersonation
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credentials-protect
Topics
Community Discussion
No community discussion yet for this question.