SY0-701 · Question #618
A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer be completed as…
The correct answer is A. Business email compromise. Business Email Compromise (BEC) is correct because the attack specifically targets an organization's financial processes by spoofing or compromising a trusted business domain (the company's own bank) to fraudulently authorize wire transfers - this is the textbook definition of…
Question
A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer be completed as soon as possible. Which of the following attacks is described?
Options
- ABusiness email compromise
- BVishing
- CSpear phishing
- DImpersonation
How the community answered
(29 responses)- A76% (22)
- B3% (1)
- C7% (2)
- D14% (4)
Explanation
Business Email Compromise (BEC) is correct because the attack specifically targets an organization's financial processes by spoofing or compromising a trusted business domain (the company's own bank) to fraudulently authorize wire transfers - this is the textbook definition of BEC.
Vishing (B) is wrong because it uses voice calls, not email, to deceive victims. Spear phishing (C) is close but is a broader term for targeted email attacks aimed at stealing credentials or data - BEC is the more precise term when the goal is fraudulent financial transfer via a compromised/spoofed business email. Impersonation (D) describes the tactic used (pretending to be the bank), but BEC is the specific attack category that encompasses this scenario.
Memory tip: Think "BEC = Bank/Boss Email + Cash" - whenever a scenario involves email spoofing a trusted business entity specifically to move money, that's always BEC, not generic phishing.
Topics
Community Discussion
No community discussion yet for this question.