CompTIA Server+ SK0-005 Practice Question

The correct answer is vishing. Vishing, or 'voice phishing', is a social engineering attack that uses voice communication, such as a phone call, to manipulate a target into revealing sensitive information. The scenario describes an attacker using a phone call, creating a false identity (pretexting), and applying pressure through urgency to obtain login credentials.

• Spear phishing is incorrect because it is a highly targeted attack delivered via email, not a phone call.
• Baiting is incorrect because it involves luring a victim with a tempting offer or object, such as a malware-infected USB drive left in a public space.
• Tailgating is incorrect as it is a physical security breach where an unauthorized person follows an authorized individual into a restricted area.