🏠 Homepage 📘 Download PDF Books 📕 Premium PDF Books

Phishing Quiz 3 (10 MCQs)

This set of multiple-choice questions evaluates understanding of phishing types, mobile security, and text message scams. It covers concepts such as attachment safety, cyber attacks, cybercrime, deceptive emails, email scams, fraudulent emails, information accuracy, malicious links, malware, personal information theft, phishing tactics, sensitive information, smishing, text message attacks, unexpected emails, and website authenticity.

Quiz Instructions

Select an option to see the correct answer instantly.

1. Is the following statement TRUE or FALSE?The website looks official, so the information on the website must be true.

Correct Answer: Correct answer is: B) FALSE.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: The appearance of a website being official does not guarantee the accuracy of the information it contains.

Common Mistakes: A common mistake is assuming that an official-looking website is trustworthy and contains accurate information.

Explanations: Phishing websites are often designed to look official and trustworthy to deceive users. Just because a website appears official does not mean the information is true. It is important to verify the authenticity of the website and the information it provides.

Option Analysis:

Option A: This option is incorrect because an official-looking website does not necessarily mean the information is true.
Option B: This option is correct because the appearance of a website being official does not guarantee the accuracy of the information it contains.

2. Fraudulent practice of sending emails or stealing information

Correct Answer: Correct answer is: (A) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Phishing is a fraudulent practice of sending emails or messages to trick individuals into providing sensitive information such as passwords, credit card numbers, or other personal data.

Common Mistakes: A common mistake is confusing phishing with other forms of cyber attacks, such as malware or ransomware.

Explanations: Phishing involves the use of deceptive emails or messages to steal personal information. This matches the description given in the question.

Option Analysis:

Option A: Correct. Phishing is the fraudulent practice of sending emails or stealing information.
Option B: Incorrect. A homepage is the main page of a website, not a fraudulent practice.
Option C: Incorrect. A keyword is a significant word used in search queries, not a fraudulent practice.
Option D: Incorrect. The correct answer is provided in the options.

3. You receive an unexpected email attachment from a friend. You were not even expecting an email from them. What is the best thing to do?

Correct Answer: Correct answer is: (C) Delete the email.

Exam Relevance: CISSP, CompTIA Security+, SSCP

Difficulty: Moderate

Concept notes: Phishing attacks often involve unsolicited emails with attachments designed to trick recipients into opening them, potentially leading to malware infection or data theft.

Common Mistakes: A common mistake is to open unexpected attachments out of curiosity or a sense of urgency, which can expose the device to malicious content.

Explanations: Deleting the email is the safest course of action when receiving an unexpected attachment from a friend. This prevents any potential malware from being executed on your device. If the attachment is important, the sender can resend it after verifying the original email was not part of a phishing attempt.

Option Analysis:

Option A: Opening the attachment can expose your device to malware or other malicious content, which is a significant risk.
Option B: Asking a trusted friend for advice is a good practice, but it is not as immediate or safe as deleting the email.
Option C: Deleting the email is the safest action to prevent potential harm from the attachment.
Option D: None of the above is incorrect because deleting the email is a valid and safe action.

4. A type of phishing attack where mobile phone users receive text messages containing a Web site hyperlink is called .....

Correct Answer: Correct answer is: (A) Smishing.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Smishing is a type of phishing attack where mobile phone users receive text messages containing a hyperlink to a malicious website.

Common Mistakes: A common mistake is confusing smishing with vishing, which involves voice calls rather than text messages.

Explanations: Smishing specifically refers to phishing attacks conducted via text messages. The term "smishing" is a portmanteau of "SMS" and "phishing." In this attack, users receive text messages with links that, when clicked, can lead to malicious websites designed to steal personal information or install malware.

Option Analysis:

Option A: Correct. Smishing is the correct term for phishing attacks via text messages.
Option B: Incorrect. Vishing refers to phishing attacks conducted via voice calls, not text messages.
Option C: Incorrect. This option is not correct as only one specific term is being asked for.
Option D: Incorrect. This option is not correct as the correct term is provided in option A.

Mnemonic: S for SMS, M for Mobile, I for Internet, N for Network, G for Get Scammed.

5. The fraudulent practice of sending emails or other messages that look to be from reputable companies in order to access users' personal information, such as passwords and credit card numbers.

Correct Answer: Correct answer is: (B) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Phishing is a fraudulent practice where attackers send emails or messages that appear to be from reputable sources to trick users into revealing personal information such as passwords and credit card numbers.

Common Mistakes: A common mistake is confusing phishing with other forms of online fraud, such as spamming, ghosting, or catfishing.

Explanations: Phishing involves the use of deceptive emails or messages that mimic legitimate sources to trick individuals into providing sensitive information. This matches the description given in the question, making phishing the correct answer.

Option Analysis:

Option A: Spamming refers to the sending of unsolicited messages, often for advertising purposes, but does not necessarily involve deception to obtain personal information.
Option B: Phishing is the correct answer as it involves deceptive practices to obtain personal information.
Option C: Ghosting refers to the act of suddenly ending all communication with someone, typically in a social or romantic context, and is not related to obtaining personal information.
Option D: Catfishing involves creating a false identity online to deceive someone, often in a romantic context, but does not specifically involve the use of deceptive emails or messages to obtain personal information.

6. Phishing generally refers to

Correct Answer: Correct answer is: (B) Scams through emails.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Easy

Concept notes: Phishing is a type of cybercrime where attackers use deceptive emails to trick individuals into revealing sensitive information or clicking on malicious links.

Common Mistakes: A common misunderstanding is that phishing only occurs through emails. However, phishing can also occur through websites, phone calls, and text messages.

Explanations: Phishing is most commonly associated with scams through emails because attackers often use emails to send deceptive messages that appear to be from legitimate sources. These emails can contain links to fake websites or attachments that can compromise the victim's computer or steal personal information.

Option Analysis:

Option A: While phishing can occur through websites, it is not the most common form. Websites are often used as a secondary step after an email lure.
Option B: This is the correct answer because phishing is most commonly associated with scams through emails.
Option C: Scams through phone calls are known as "vishing," which is a form of phishing but not the most common form.
Option D: Scams through text messages are known as "smishing," which is another form of phishing but not the most common form.

7. When some unidentified /unknown person /firm sends you mail in a trustworthy /lucrative way asking for sensitive banks and online payment information, this is a case of .....?

Correct Answer: Correct answer is: (C) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Moderate

Concept notes: Phishing is a type of cyber attack where attackers send fraudulent communications that appear to come from a reputable source. The goal is to steal sensitive data, such as credit card numbers, usernames, passwords, and other personal information.

Common Mistakes: A common mistake is confusing phishing with spam, which is unsolicited bulk email, or with hacking, which involves unauthorized access to systems.

Explanations: Phishing involves sending emails that appear trustworthy and lucrative to trick individuals into providing sensitive information. This matches the scenario described in the question, where an unknown sender asks for sensitive bank and online payment information.

Option Analysis:

Option A: Spam refers to unsolicited bulk email, not specifically targeting sensitive information.
Option B: Hacking involves unauthorized access to systems, not necessarily through email communication.
Option C: Phishing is the correct term for fraudulent emails designed to steal sensitive information.
Option D: Vishing is a form of phishing that uses voice calls, not emails.

8. True or False: It is safe to open attachments from people you don't know

Correct Answer: Correct answer is: (B) False.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Phishing attacks often use email attachments as a method to deliver malware or to trick recipients into providing sensitive information.

Common Mistakes: A common mistake is assuming that an email attachment is safe if it appears to come from a known or trusted source. However, phishing emails can spoof sender addresses to appear legitimate.

Explanations: Opening attachments from unknown senders can expose your device to malware or other malicious software. Phishing attacks frequently use email attachments to trick users into downloading harmful files. Therefore, it is unsafe to open attachments from people you do not know.

Option Analysis:

Option A: This option is incorrect because opening attachments from unknown senders can lead to security risks and potential phishing attacks.
Option B: This option is correct because opening attachments from unknown senders is unsafe and can result in phishing attacks or malware infections.

9. What might a phishing email ask you to do?

Correct Answer: Correct answer is: (B) Click a link or give sensitive information.

Exam Relevance: CISSP, CompTIA Security+, CISA

Difficulty: Easy

Concept notes: Phishing emails are designed to trick individuals into revealing sensitive information or performing actions that can compromise their security. Common tactics include asking recipients to click on malicious links or provide personal data.

Common Mistakes: A common misunderstanding is that phishing emails are always obvious and easy to spot. In reality, they can be highly sophisticated and convincing.

Explanations: Phishing emails often ask recipients to click on a link or provide sensitive information such as passwords, credit card details, or personal identification numbers. This is because these actions can lead to unauthorized access to accounts or financial fraud.

Option Analysis:

Option A: Updating a social media profile is not a typical phishing tactic.
Option B: Clicking a link or giving sensitive information is a common phishing tactic.
Option C: Downloading a new game is not a typical phishing tactic.
Option D: Sharing a funny video is not a typical phishing tactic.

10. Trying to get people to reveal private information

Correct Answer: Correct answer is: (C) Phishing.

Exam Relevance: CISSP, CompTIA Security+, CEH

Difficulty: Moderate

Concept notes: Phishing is a type of cyber attack where attackers attempt to trick individuals into revealing sensitive information, such as passwords, credit card numbers, or other personal data.

Common Mistakes: A common misunderstanding is that phishing is only related to email scams, but it can also occur through other mediums like text messages, social media, and phone calls.

Explanations: Phishing involves trying to get people to reveal private information. This aligns with the definition of phishing, which is a fraudulent attempt to obtain sensitive information by disguising oneself as a trustworthy entity in digital communication.

Option Analysis:

Option A: A virus is a type of malicious software that can replicate itself and spread to other computers, but it does not specifically involve tricking people into revealing private information.
Option B: A scam is a fraudulent scheme, but it is a broader term and does not specifically refer to the act of tricking individuals into revealing private information through digital communication.
Option C: Phishing is the correct term for the act of trying to get people to reveal private information through deceptive digital communication.
Option D: This option is incorrect as phishing is a well-defined term and is the correct answer.

Frequently Asked Questions

What is phishing?

Phishing is a cyber attack where attackers send deceptive emails or messages to trick individuals into revealing personal information, such as passwords or financial details.

How can I identify a phishing email?

Phishing emails often contain urgent or threatening language, request personal information, and include suspicious links or attachments. Always verify the sender and check for grammatical errors.

What should I do if I receive a suspicious email?

Do not click on any links or download attachments. Report the email to your IT department or use the reporting feature in your email client to flag it as phishing.

What is smishing?

Smishing is a form of phishing that uses text messages to trick individuals into providing personal information or clicking on malicious links. It is a common type of text message attack.

Why is it important to verify website authenticity?

Verifying website authenticity helps prevent access to fraudulent sites that may steal your personal information or install malware on your device. Always check for secure connections (HTTPS) and trusted domain names.

🏠 Back to Homepage 📘 Download PDF Books 📕 Premium PDF Books