A user needs to complete training at https://comptiatraining.com. After manually entering the URL, the user sees that the accessed website is noticeably different from the standard company website…

Question

Options

• ACross-site scripting
• BPretexting
• CTyposquatting
• DVishing

• A
  3% (1)
• B
  6% (2)
• C
  90% (28)

Explanation

Typosquatting occurs when an attacker registers a domain name that closely resembles a legitimate site, banking on users making typing errors - in this case, the user manually typed the URL, making a subtle typo that landed them on a malicious lookalike site. This perfectly fits the scenario: the site loads but looks noticeably different from the real company site.

Why the distractors are wrong:

• A. Cross-site scripting (XSS) - involves injecting malicious scripts into a trusted website to attack its users; it wouldn't redirect you to a completely different-looking site.
• B. Pretexting - is a social engineering technique where an attacker fabricates a scenario to manipulate a victim; it involves human interaction, not a fake domain.
• D. Vishing - is voice phishing (phone calls), completely unrelated to URL entry in a browser.

Memory tip: Think "typo + squatting" - the attacker squats on a domain name that exploits your typo. The key clue in any exam question is the phrase "manually entered the URL" combined with the site looking wrong - that combo almost always signals typosquatting.

No community discussion yet for this question.