Explanation/Notes: The intention of this policy is to prevent an attacker from spoofing a request to disable a network port, and then calling the worker to troubleshoot his or her inability to access the network. When the social engineer, posing as a helpful technician, calls with preexisting knowledge of the user's network problem, the victim often complies with a request to reveal his or her password during the troubleshooting process.