nerdexam
CompTIA

SY0-501 · Question #530

A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the…

The correct answer is C. Impersonation. The caller is attempting to deceive the help desk technician by falsely claiming to be a legitimate employee to gain unauthorized access to an account. This action falls under a social engineering attack aimed at identity deception.

Submitted by jordan8· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?

Options

  • APhishing
  • BShoulder surfing
  • CImpersonation
  • DDumpster diving

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    14% (6)
  • C
    77% (33)
  • D
    7% (3)

Why each option

The caller is attempting to deceive the help desk technician by falsely claiming to be a legitimate employee to gain unauthorized access to an account. This action falls under a social engineering attack aimed at identity deception.

APhishing

Phishing typically involves sending fraudulent communications, often emails or messages, to trick recipients into revealing sensitive information or performing malicious actions.

BShoulder surfing

Shoulder surfing is a visual attack where an attacker secretly observes a victim entering sensitive information, like a password, by looking over their shoulder.

CImpersonationCorrect

Impersonation is a social engineering technique where an attacker assumes the identity of a legitimate user or authorized individual to gain unauthorized access to systems or information. In this scenario, the caller is pretending to be an employee to trick the help desk into unlocking an account, which is a direct act of impersonation.

DDumpster diving

Dumpster diving involves searching through discarded materials or trash to find sensitive information that can be used for an attack.

Concept tested: Social engineering attack types, impersonation

Source: https://learn.microsoft.com/en-us/training/modules/security-concept-fundamentals/2-social-engineering-threats

Topics

#social engineering#impersonation#vishing#identity verification

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice