After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card…

The correct answer is C. Social engineering. Social engineering is the practice of manipulating people into performing actions or divulging confidential information, often by impersonating someone else or creating a sense of urgency or trust. The suspicious caller in this scenario was trying to use social engineering to…

Submitted by eva_at· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card information in order to close an invoice. Which of the following topics did the user recognize from the training?

Options

AInsider threat
BEmail phishing
CSocial engineering
DExecutive whaling

How the community answered

(47 responses)

A
2% (1)
B
2% (1)
C
89% (42)
D
6% (3)

Explanation

Social engineering is the practice of manipulating people into performing actions or divulging confidential information, often by impersonating someone else or creating a sense of urgency or trust. The suspicious caller in this scenario was trying to use social engineering to trick the user into giving away credit card information by pretending to be the CFO and asking for a payment. The user recognized this as a potential scam and reported it to the IT help desk. The other topics are not relevant to this situation.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice