nerdexam
CompTIA

SY0-501 · Question #104

Phishing emails frequently take advantage of high-profile catastrophes reported in the news. Which of the following principles BEST describes the weakness being exploited?

The correct answer is D. Social proof. Phishing emails exploiting high-profile news catastrophes leverage the human tendency to be influenced by widespread public attention and perceived collective action, which is best described as social proof.

Submitted by javi_es· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

Phishing emails frequently take advantage of high-profile catastrophes reported in the news. Which of the following principles BEST describes the weakness being exploited?

Options

  • AIntimidation
  • BScarcity
  • CAuthority
  • DSocial proof

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    4% (1)
  • D
    83% (20)

Why each option

Phishing emails exploiting high-profile news catastrophes leverage the human tendency to be influenced by widespread public attention and perceived collective action, which is best described as social proof.

AIntimidation

Intimidation involves using threats or fear to compel a recipient to act, which is not the primary mechanism of exploiting a generally reported news event.

BScarcity

Scarcity exploits the fear of missing out on something limited in supply or time, which is not directly invoked by the mere high-profile nature of a news catastrophe.

CAuthority

Authority relies on impersonating or invoking a position of power or expertise, which, while possible in a phishing attack, is not the principle best describing the exploitation of the widespread news coverage itself.

DSocial proofCorrect

Social proof exploits the psychological principle where individuals are influenced by the actions or perceived actions of others. When a catastrophe is widely reported and discussed, phishers leverage this collective attention to make their related emails seem more credible and urgent, as recipients infer that if 'everyone' is talking about it, the email must be legitimate or important.

Concept tested: Social engineering principles; psychological manipulation in phishing

Source: https://learn.microsoft.com/en-us/viva/learning/phishing-simulation-social-engineering-tactics

Topics

#social proof#phishing#social engineering#psychological manipulation

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice