nerdexam
PECB

ISO-IEC-27001-LEAD-AUDITOR · Question #209

You received an email requiring you to send information such as name, email, and password in order to continue using your email account. If you do not send such information, your email account will…

The correct answer is B. An unauthorized action type of threat. The scenario described is a classic example of a phishing attack, which is a type of social engineering threat where attackers masquerade as a trustworthy entity in an electronic communication. The goal is to trick individuals into providing sensitive information. This…

Fundamental Principles and Concepts of Information Security

Question

You received an email requiring you to send information such as name, email, and password in order to continue using your email account. If you do not send such information, your email account will be disabled. What does this scenario present?

Options

  • AA personnel type of vulnerability
  • BAn unauthorized action type of threat
  • CA compromise of information type of threat

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    87% (34)
  • C
    3% (1)

Explanation

The scenario described is a classic example of a phishing attack, which is a type of social engineering threat where attackers masquerade as a trustworthy entity in an electronic communication. The goal is to trick individuals into providing sensitive information. This represents an unauthorized action type of threat because it involves an attacker attempting to gain unauthorized access to personal information.

Topics

#phishing#social engineering#unauthorized action#threat types

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice