220-802 · Question #794
A user receives an unsolicited email stating that they need to follow a link to change their username and password because their bank account has been compromised. Of which of the following is this…
The correct answer is C. Phishing. Phishing is a social engineering attack where fraudulent messages impersonate legitimate entities to trick users into revealing credentials or clicking malicious links.
Question
A user receives an unsolicited email stating that they need to follow a link to change their username and password because their bank account has been compromised. Of which of the following is this an example?
Options
- ASPAM
- BSpyware
- CPhishing
- DMalware
How the community answered
(27 responses)- A4% (1)
- C89% (24)
- D7% (2)
Why each option
Phishing is a social engineering attack where fraudulent messages impersonate legitimate entities to trick users into revealing credentials or clicking malicious links.
SPAM refers to unsolicited bulk email used for advertising or nuisance purposes, and while phishing emails are unsolicited, SPAM alone does not imply credential theft or impersonation.
Spyware is malicious software installed on a device that covertly collects user information - it is not an email-based social engineering technique.
Phishing involves sending deceptive emails that appear to come from a trusted source (such as a bank) and direct victims to fake sites or actions to harvest credentials. The scenario matches phishing precisely - an unsolicited email claiming account compromise and requesting the user follow a link to change credentials.
Malware is a broad category of malicious software including viruses and ransomware, but it does not describe the specific social engineering tactic of deceptive email impersonation.
Concept tested: Phishing attack identification and email-based social engineering
Source: https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks
Topics
Community Discussion
No community discussion yet for this question.