A user receives a phone call at home from someone claiming to be from their company's IT help desk. The help desk person wants to verify their username and password to ensure that the user's account…

The correct answer is D. Social engineering. Social engineering is the broad category of attacks that manipulate people into divulging confidential information or performing actions by exploiting trust and human psychology rather than exploiting technical vulnerabilities. This phone-based variant is also called 'vishing'…

Network security

Question

A user receives a phone call at home from someone claiming to be from their company's IT help desk. The help desk person wants to verify their username and password to ensure that the user's account has not been compromised. Which of the following attacks has just occurred?

Options

AEvil twin
BPhishing
CMan-in-the-middle
DSocial engineering

How the community answered

(64 responses)

A
6% (4)
B
2% (1)
C
5% (3)
D
88% (56)

Explanation

Social engineering is the broad category of attacks that manipulate people into divulging confidential information or performing actions by exploiting trust and human psychology rather than exploiting technical vulnerabilities. This phone-based variant is also called 'vishing' (voice phishing), but among the answer choices, social engineering is the most accurate and encompassing term. Evil twin is a rogue wireless access point attack, phishing typically refers to deceptive emails (not calls), and man-in-the-middle involves intercepting communications between two parties.

Topics

#social engineering#vishing#credential theft

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice