SY0-501 Question #530: Real Exam Question with Answer & Explanation

Question

A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?

Options

• APhishing
• BShoulder surfing
• CImpersonation
• DDumpster diving

Explanation

The caller is attempting to deceive the help desk technician by falsely claiming to be a legitimate employee to gain unauthorized access to an account. This action falls under a social engineering attack aimed at identity deception.

Common mistakes.

• A. Phishing typically involves sending fraudulent communications, often emails or messages, to trick recipients into revealing sensitive information or performing malicious actions.
• B. Shoulder surfing is a visual attack where an attacker secretly observes a victim entering sensitive information, like a password, by looking over their shoulder.
• D. Dumpster diving involves searching through discarded materials or trash to find sensitive information that can be used for an attack.

Concept tested. Social engineering attack types, impersonation

Reference. https://learn.microsoft.com/en-us/training/modules/security-concept-fundamentals/2-social-engineering-threats

No community discussion yet for this question.