Exam SY0-501 topic 1 question 524 discussion

Not phishing or vhishing because the caller is not trying to gain any information from the callee. He is impersonating as an employee.

'Vishing' is over the phone phishing where scammers will try to persuade people to share information by posing as bank staff or other financial service employees. Answer is clearly Impersonation.

Answer C. A. Phishing - Usually done via email and trying to 'phish' to a number of users not one single individual. B. Shoulder surfing - Looking over a user whist they are on a device to steal information. C. Impersonation - The question says what type of 'attack' is this - indicating that the user on the phone IS NOT an employee, the user on the phone is 'impersonating' the real employee. I agree it should really be 'vishing' as it is over the phone but this is not a answer option for this specific question. D. Dumpster diving - Going through garbage to try and find things like credentials, credit card numbers, etc.

How do we know it's impersonation ? There's no proof that he is not an employee. ??

so I assume C is correct as Impersonation is regard as to spoof a real employee......

why no vishing in the answer as it is the correct one....

A or C? Impersonation is defined as something done in person. Vishing is defined as phishing over the phone.