CompTIA Security+ (SY0-501) — Question 715

Which of the following describes the key difference between vishing and phishing attacks?

Answer options

• A. Phishing is used by attackers to steal a person's identity.
• B. Vishing attacks require some knowledge of the target of attack.
• C. Vishing attacks are accomplished using telephony services.
• D. Phishing is a category of social engineering attack.

Correct answer: C

Explanation

The correct answer is C because vishing specifically utilizes telephony services to carry out its attacks, whereas phishing primarily occurs through electronic communication like email. Options A, B, and D describe aspects of phishing or social engineering in general but do not highlight the unique method of vishing.