SY0-501 · Question #530
A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the…
The correct answer is C. Impersonation. The caller is attempting to deceive the help desk technician by falsely claiming to be a legitimate employee to gain unauthorized access to an account. This action falls under a social engineering attack aimed at identity deception.
Question
A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?
Options
- APhishing
- BShoulder surfing
- CImpersonation
- DDumpster diving
How the community answered
(43 responses)- A2% (1)
- B14% (6)
- C77% (33)
- D7% (3)
Why each option
The caller is attempting to deceive the help desk technician by falsely claiming to be a legitimate employee to gain unauthorized access to an account. This action falls under a social engineering attack aimed at identity deception.
Phishing typically involves sending fraudulent communications, often emails or messages, to trick recipients into revealing sensitive information or performing malicious actions.
Shoulder surfing is a visual attack where an attacker secretly observes a victim entering sensitive information, like a password, by looking over their shoulder.
Impersonation is a social engineering technique where an attacker assumes the identity of a legitimate user or authorized individual to gain unauthorized access to systems or information. In this scenario, the caller is pretending to be an employee to trick the help desk into unlocking an account, which is a direct act of impersonation.
Dumpster diving involves searching through discarded materials or trash to find sensitive information that can be used for an attack.
Concept tested: Social engineering attack types, impersonation
Source: https://learn.microsoft.com/en-us/training/modules/security-concept-fundamentals/2-social-engineering-threats
Topics
Community Discussion
No community discussion yet for this question.