ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 29 - SY0-701 discussion

Report
Export

An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)

A.
Typosquatting
Answers
A.
Typosquatting
B.
Phishing
Answers
B.
Phishing
C.
Impersonation
Answers
C.
Impersonation
D.
Vishing
Most voted
Answers (3)
Most voted
D.
Vishing
E.
Smishing
Most voted
Answers (4)
Most voted
E.
Smishing
F.
Misinformation
Answers
F.
Misinformation
Suggested answer: B, E

Explanation:

Smishing is a type of social engineering technique that uses text messages (SMS) to trick victims into revealing sensitive information, clicking malicious links, or downloading malware.Smishing messages often appear to come from legitimate sources, such as banks, government agencies, or service providers, and use urgent or threatening language to persuade the recipients to take action12. In this scenario, the text message that claims to be from the payroll department is an example of smishing.

Impersonation is a type of social engineering technique that involves pretending to be someone else, such as an authority figure, a trusted person, or a colleague, to gain the trust or cooperation of the target.Impersonation can be done through various channels, such as phone calls, emails, text messages, or in-person visits, and can be used to obtain information, access, or money from the victim34. In this scenario, the text message that pretends to be from the payroll department is an example of impersonation.

A) Typosquatting is a type of cyberattack that involves registering domain names that are similar to popular or well-known websites, but with intentional spelling errors or different extensions.Typosquatting aims to exploit the common mistakes that users make when typing web addresses, and redirect them to malicious or fraudulent sites that may steal their information, install malware, or display ads56. Typosquatting is not related to text messages or credential verification.

B) Phishing is a type of social engineering technique that uses fraudulent emails to trick recipients into revealing sensitive information, clicking malicious links, or downloading malware.Phishing emails often mimic the appearance and tone of legitimate organizations, such as banks, retailers, or service providers, and use deceptive or urgent language to persuade the recipients to take action78. Phishing is not related to text messages or credential verification.

D) Vishing is a type of social engineering technique that uses voice calls to trick victims into revealing sensitive information, such as passwords, credit card numbers, or bank account details.Vishing calls often appear to come from legitimate sources, such as law enforcement, government agencies, or technical support, and use scare tactics or false promises to persuade the recipients to comply9. Vishing is not related to text messages or credential verification.

Misinformation is a type of social engineering technique that involves spreading false or misleading information to influence the beliefs, opinions, or actions of the target. Misinformation can be used to manipulate public perception, create confusion, damage reputation, or promote an agenda . Misinformation is not related to text messages or credential verification. Reference=1:What is Smishing? | Definition and Examples | Kaspersky2: Smishing - Wikipedia3: Impersonation Attacks: What Are They and How Do You Protect Against Them?4: Impersonation - Wikipedia5:What is Typosquatting? | Definition and Examples | Kaspersky6: Typosquatting - Wikipedia7:What is Phishing? | Definition and Examples | Kaspersky8: Phishing - Wikipedia9:What is Vishing? | Definition and Examples | Kaspersky: Vishing - Wikipedia :What is Misinformation? | Definition and Examples | Britannica: Misinformation - Wikipedia

asked 02/10/2024
Jeffrey Holt Jr
26 questions
User
Your answer:
5 comments
Sorted by
Up
0
Down
User
JR Gee

Edited 19 days ago

Voted D, E

Correct D E

Reply
Reply
Report

Up
0
Down
User
Mike van den Berg

Edited 19 days ago

Voted C, E

C E. The attacker is posing as the payroll department, a trusted entity within the organization. Since the fraudulent request arrives via text message, this attack is specifically known as smishing (SMS phishing)

Reply
Reply
Report

Up
0
Down
User
Mauro Daniele

Edited 19 days ago

Voted D, E

D Vishing is a form of phishing that typically uses phone calls to trick individuals into revealing sensitive information. E Smishing is a specific type of phishing that uses SMS (text messages) to trick individuals into revealing sensitive information, such as usernames, passwords, or other personal details

Reply
Reply
Report

User
Bahman Talachian

Edited 19 days ago

I choose C E

UpVote
0
DownVote
0
Reply
Reply
Report

Up
0
Down
User
Trang Anna

Edited 19 days ago

Voted D, E

Ans D E

Reply
Reply
Report