nerdexam
CompTIA

SY0-501 · Question #409

Which of the following describes the key difference between vishing and phishing attacks?

The correct answer is C. Vishing attacks are accomplished using telephony services. The key difference between vishing and phishing attacks lies in the communication method used to deceive victims.

Submitted by the_admin· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

Which of the following describes the key difference between vishing and phishing attacks?

Options

  • APhishing is used by attackers to steal a person's identity.
  • BVishing attacks require some knowledge of the target of attack.
  • CVishing attacks are accomplished using telephony services.
  • DPhishing is a category of social engineering attack.

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    78% (35)
  • D
    13% (6)

Why each option

The key difference between vishing and phishing attacks lies in the communication method used to deceive victims.

APhishing is used by attackers to steal a person's identity.

While phishing attacks can lead to identity theft, this is a potential outcome and not the exclusive or defining characteristic that differentiates phishing from other social engineering attacks like vishing.

BVishing attacks require some knowledge of the target of attack.

Both vishing and phishing attacks can be either highly targeted, requiring some prior knowledge of the victim, or broad, untargeted campaigns, thus this is not a distinguishing difference.

CVishing attacks are accomplished using telephony services.Correct

Vishing, short for 'voice phishing,' specifically utilizes telephony services, such as phone calls or VoIP, to trick individuals into divulging sensitive information or performing actions. This method directly contrasts with phishing, which primarily employs email or text messages as its attack vector.

DPhishing is a category of social engineering attack.

Both phishing and vishing are categories of social engineering attacks, meaning this statement describes a shared characteristic rather than a key difference between the two.

Concept tested: Social Engineering Attack Types (Phishing vs. Vishing)

Source: https://learn.microsoft.com/en-us/security/education/threat-actor-and-attack-overview

Topics

#vishing#phishing#social engineering#telephony attacks

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice