SY0-701 · Question #122
An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being…
The correct answer is C. Impersonation E. Smishing. Smishing (E) applies because the attack is delivered via SMS/text message - "smishing" = SMS + phishing. Impersonation (C) applies because the attacker is posing as the payroll department, a trusted internal authority, to trick the victim into revealing credentials. Why the…
Question
An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)
Options
- ATyposquatting
- BPhishing
- CImpersonation
- DVishing
- ESmishing
- FMisinformation
How the community answered
(56 responses)- B4% (2)
- C89% (50)
- D2% (1)
- F5% (3)
Explanation
Smishing (E) applies because the attack is delivered via SMS/text message - "smishing" = SMS + phishing. Impersonation (C) applies because the attacker is posing as the payroll department, a trusted internal authority, to trick the victim into revealing credentials.
Why the others are wrong:
- B (Phishing) is close but refers specifically to email-based attacks; smishing is the correct term when the vector is SMS.
- D (Vishing) is voice-based phishing (phone calls), not text messages.
- A (Typosquatting) involves registering lookalike domain names - there's no URL or domain involved here.
- F (Misinformation) is the spread of false information broadly, not a targeted credential-harvesting technique.
Memory tip: Think of the delivery channel prefix - Smishing = SMS, Vishing = Voice, Phishing = email (no prefix = classic). Whenever someone pretends to be a person or department to gain trust, that's always impersonation, regardless of channel.
Topics
Community Discussion
No community discussion yet for this question.