022_Phishing – CompTIA Security+ SY0-701 – 2.2

What is a sign of a phishing email?

• Well-structured content with no errors

• Poor formatting, inconsistent fonts, or spelling mistakes

• Professional language and tone

• Clear and concise subject line

What is typosquatting?

• A method of securing a domain name for future use.

• A phishing method where attackers register domain names with slight misspellings.

• A technique used to improve website SEO rankings.

• A strategy for creating fake social media accounts.

What is vishing?

• Phishing attacks carried out over the phone

• Phishing attacks via email

• Phishing attacks through social media

• Phishing attacks using text messages

How do attackers misuse phone verification codes?

• They trick victims into providing two-factor authentication (2FA) codes

• They use them to reset passwords without permission

• They send them to unauthorized devices for access

• They store them for future phishing attacks

How can multi-factor authentication (MFA) help prevent phishing attacks?

• It requires an additional verification step, making it harder for attackers to gain access.

• It allows users to change their passwords more frequently.

• It automatically detects and blocks phishing websites.

• It provides a backup email for account recovery.

What is one way to verify a sender’s email address?

• Check the sender's email for typos

• Hover over the sender's email to check for inconsistencies

• Reply to the email asking for confirmation

• Look for a phone number in the email signature

What is a common tactic used in phishing attacks?

• Asking users to reset their passwords for security reasons

• Sending emails that look like they come from legitimate companies

• Using fake login pages that mimic real ones

• All of the above

Why do attackers create fake login pages?

• To trick users into entering their usernames and passwords

• To provide a secure login experience

• To enhance user engagement

• To collect user feedback

Why should users manually navigate to websites instead of clicking on links in emails?

• It prevents phishing attacks

• It saves time

• It improves website loading speed

• It enhances user experience

What is a common smishing scam?

• USPS: Your package delivery has been suspended due to an incorrect address. Click here to update.

• FedEx: Your shipment is on hold due to a payment issue. Please verify your details.

• Amazon: Your account has been compromised. Click here to secure it now.

• Bank: Your recent transaction was flagged. Click here to confirm your identity.