Mimi has just received a call from the help desk that her password needs to be updated. A few days later, she notices her account has been compromised. Which kind of attack MOST LIKELY occurred?

Domain 5: Identity and Access Management Practice Questions
Questions from the following topics are included in this domain: 
Controlling physical and logical access to assets 
Managing authentication of people and devices
Implementing and managing federation, and other authorization mechanisms
Managing the provisioning and deprovisioning life cycle
Implementing and managing authentication systems