nerdexam
CompTIA

220-802 · Question #794

A user receives an unsolicited email stating that they need to follow a link to change their username and password because their bank account has been compromised. Of which of the following is this…

The correct answer is C. Phishing. Phishing is a social engineering attack where fraudulent messages impersonate legitimate entities to trick users into revealing credentials or clicking malicious links.

Networking

Question

A user receives an unsolicited email stating that they need to follow a link to change their username and password because their bank account has been compromised. Of which of the following is this an example?

Options

  • ASPAM
  • BSpyware
  • CPhishing
  • DMalware

How the community answered

(27 responses)
  • A
    4% (1)
  • C
    89% (24)
  • D
    7% (2)

Why each option

Phishing is a social engineering attack where fraudulent messages impersonate legitimate entities to trick users into revealing credentials or clicking malicious links.

ASPAM

SPAM refers to unsolicited bulk email used for advertising or nuisance purposes, and while phishing emails are unsolicited, SPAM alone does not imply credential theft or impersonation.

BSpyware

Spyware is malicious software installed on a device that covertly collects user information - it is not an email-based social engineering technique.

CPhishingCorrect

Phishing involves sending deceptive emails that appear to come from a trusted source (such as a bank) and direct victims to fake sites or actions to harvest credentials. The scenario matches phishing precisely - an unsolicited email claiming account compromise and requesting the user follow a link to change credentials.

DMalware

Malware is a broad category of malicious software including viruses and ransomware, but it does not describe the specific social engineering tactic of deceptive email impersonation.

Concept tested: Phishing attack identification and email-based social engineering

Source: https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks

Topics

#phishing#email security#social engineering#identity theft

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice