022_Phishing – CompTIA Security+ SY0-701 – 2.2

Front

What is phishing?

Back

A social engineering attack that manipulates individuals into revealing sensitive information.

Front

How do attackers commonly distribute phishing messages?

Back

Email, text messages, and phone calls

Front

Why should you avoid clicking on links in unsolicited emails?

Back

They may lead to fake websites designed to steal information

Front

What is a sign of a phishing email?

Back

Poor formatting, inconsistent fonts, or spelling mistakes

Front

How do phishing emails create urgency?

Back

By threatening consequences if immediate action is not taken

Front

What is an example of an inconsistent sender address in a phishing email? Options: An email from "[e-mail]" for PayPal services, An email from "icloud.com" about Rackspace services, An email from "amazon.com" regarding your recent order, An email from your bank using its official domain

Back

An email from "icloud.com" about Rackspace services

Front

What is a common tactic used in phishing attacks? Options: Asking users to reset their passwords for security reasons, Sending emails that look like they come from legitimate companies, Using fake login pages that mimic real ones, All of the above

Back

All of the above

Front

What was a key indicator in the Rackspace phishing attack? Options: The email asked users to confirm their email for an upgrade, The email threatened to block sending/receiving emails if no action was taken, The sender email domain did not match Rackspace, All of the above

Back

All of the above

Front

Why do attackers create fake login pages?

Back

To trick users into entering their usernames and passwords

Front

How can attackers misuse compromised email accounts?

Back

Reset passwords for financial accounts