220-802 · Question #547
Which of the following types of security threats is delivered primarily via email?
The correct answer is A. Phishing. Phishing is a social engineering attack delivered primarily through email, where attackers impersonate trusted entities to trick recipients into revealing credentials or clicking malicious links.
Question
Which of the following types of security threats is delivered primarily via email?
Options
- APhishing
- BRootkits
- CViruses
- DGrayware
How the community answered
(41 responses)- A88% (36)
- B2% (1)
- C2% (1)
- D7% (3)
Why each option
Phishing is a social engineering attack delivered primarily through email, where attackers impersonate trusted entities to trick recipients into revealing credentials or clicking malicious links.
Phishing attacks use fraudulent emails crafted to appear as if they come from legitimate organizations - such as banks, IT departments, or vendors - to deceive users. The email typically contains a malicious link or attachment designed to steal credentials or install malware. Email is the primary and defining delivery vector for phishing, distinguishing it from other attack types.
Rootkits are typically installed through software exploits, drive-by downloads, or bundled with malicious software - not delivered primarily via email.
Viruses can spread through email attachments, but they are also transmitted via infected media, downloads, and network shares, so email is not their primary defining vector.
Grayware (adware, spyware, etc.) is generally installed through software bundles, deceptive downloads, or browser extensions, not primarily delivered via email.
Concept tested: Phishing as an email-based social engineering threat
Source: https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks
Topics
Community Discussion
No community discussion yet for this question.