What is the legal consequence for individuals who engage in phishing activities?

They can face criminal charges, fines, and imprisonment.

What is a common characteristic of phishing emails related to online shopping or deliveries?

They claim there's an urgent issue with your order or delivery.

Phishing conducted via SMS or text messages.

What is the best long-term strategy for individuals and organizations to combat phishing?

Promote ongoing education, critical thinking, and security best practices.

Which of the following is NOT a good practice to protect yourself from phishing?

Clicking links in emails from unknown senders that seem important.

How can browser extensions help protect against phishing?

They can identify and warn users about known malicious websites.

What is a common lure used in business email compromise (BEC) attacks, a type of phishing targeting organizations?

Impersonating an executive to request an urgent wire transfer.

What is "spear phishing"?

A targeted phishing attack aimed at a specific individual or organization.

What type of information are phishing attackers typically trying to obtain?

Publicly available news articles.

What can you look for in a URL to help identify a potential phishing website?

Misspellings, extra characters, or wrong domain extension.

What is a common tactic used in phishing emails to create a sense of urgency?

Claiming your account will be suspended if you don't act immediately.

What is the best way to handle an unsolicited email attachment?

Open only if expected and trusted; scan if unsure.

Why do phishing emails often mimic legitimate organizations?

To build trust and make the request seem legitimate.

How can you verify the legitimacy of a request received via email or message?

Contact the organization through official channels.

How can multi-factor authentication (MFA) help prevent phishing attacks from being successful?

Even if they steal your password, they need a second factor to access.

What is the primary goal of a phishing attack?

To trick the victim into revealing sensitive information.

What is a "QR code phishing" or "quishing" attack?

Using malicious QR codes that redirect users to phishing websites.

What role do social media platforms play in phishing attacks?

Attackers use them to gather personal info or spread malware.

What is a "water holing" attack?

Compromising a website commonly visited by a specific group of users.

Which of these is a red flag that an email might be a phishing attempt?

The email contains urgent requests or threats.

What is the significance of the "S" in "HTTPS" when visiting a website?

It stands for "Secure" and indicates the connection is encrypted.

What is the role of spam filters in preventing phishing attacks?

They block many known phishing emails using various criteria.

What should a company do to protect its employees from phishing attacks?

Provide regular cybersecurity awareness training.

Phishing conducted over the phone or voice messages.

What is the purpose of a "typosquatting" or "domain spoofing" attack in phishing?

Creating a fake site with a slightly altered domain to trick users.

What is the purpose of a phishing simulation exercise within an organization?

To educate employees about phishing tactics and assess their susceptibility

Why are older adults often targeted in phishing scams?

They may be less familiar with online threats and more trusting.

What should you do if you receive a suspicious email asking for your login credentials?

Don't click links or provide info; verify through official channels.

What is a "pharming" attack?

Redirecting users to a fake website even if they type the correct URL.

Which of the following is a common method used in phishing attacks?

Sending deceptive emails or messages.

studbud

PHISING

30 termsStudBud Administration

Imported from external platform

Flashcards30 cardsFPractice quizPHost liveL

Questions 30

Answers

1
What is the legal consequence for individuals who engage in phishing activities?
There are generally no legal repercussions.
They can face criminal charges, fines, and imprisonment.
They might have their internet access temporarily suspended.
They usually receive a warning email.
2
What is a common characteristic of phishing emails related to online shopping or deliveries?
They always include a valid customer support phone number.
They usually have perfect tracking information.
They encourage you to take your time and review details.
They claim there's an urgent issue with your order or delivery.
3
What is "smishing"?
Phishing through smoke signals.
Phishing using social media platforms.
Phishing conducted via SMS or text messages.
Phishing using encrypted messaging apps.
4
What is the best long-term strategy for individuals and organizations to combat phishing?
Blame users who fall victim to phishing attacks.
Promote ongoing education, critical thinking, and security best practices.
Ignore all suspicious emails.
Rely solely on antivirus software.
5
Which of the following is NOT a good practice to protect yourself from phishing?
Enabling multi-factor authentication.
Being cautious about sharing personal information online.
Keeping your software up to date.
Clicking links in emails from unknown senders that seem important.
6
How can browser extensions help protect against phishing?
They can automatically fill in online forms.
They can translate web pages into different languages.
They can identify and warn users about known malicious websites.
They can speed up website loading times.
7
What is a common lure used in business email compromise (BEC) attacks, a type of phishing targeting organizations?
Sending out mass emails with generic greetings.
Offering employees a bonus for clicking a link.
Impersonating an executive to request an urgent wire transfer.
Claiming there is a virus on the employee's computer.
8
What is "spear phishing"?
A wide-net phishing campaign targeting many individuals.
A phishing attack that uses a physical spear to gain access.
A targeted phishing attack aimed at a specific individual or organization.
A type of phishing that uses audio messages.
9
What type of information are phishing attackers typically trying to obtain?
Stock market updates.
Weather forecasts.
Passwords, credit card details, and personal information.
Publicly available news articles.
10
What can you look for in a URL to help identify a potential phishing website?
The presence of the organization's name.
The absence of "www" at the beginning of the address.
A green padlock icon in the address bar.
Misspellings, extra characters, or wrong domain extension.
11
What is a common tactic used in phishing emails to create a sense of urgency?
Offering a free gift with no time limit.
Encouraging you to take your time and review carefully.
Providing detailed explanations and background information.
Claiming your account will be suspended if you don't act immediately.
12
What is the best way to handle an unsolicited email attachment?
Open it immediately to see what it contains.
Open only if expected and trusted; scan if unsure.
Forward it to your IT department without opening it.
Save it to your computer and scan it later.
13
Why do phishing emails often mimic legitimate organizations?
To provide helpful links to official websites.
To help users easily identify genuine emails.
To avoid spam filters.
To build trust and make the request seem legitimate.
14
How can you verify the legitimacy of a request received via email or message?
Contact the organization through official channels.
Assume it's legitimate if it looks official.
Ask your social media contacts if they have received the same message.
Click on any provided links to check the website.
15
How can multi-factor authentication (MFA) help prevent phishing attacks from being successful?
Even if they steal your password, they need a second factor to access.
It blocks all suspicious login attempts automatically.
It makes your internet connection faster.
It encrypts your emails.
16
What is the primary goal of a phishing attack?
To publicly deface a website.
To trick the victim into revealing sensitive information.
To install malware on a victim's computer.
To disrupt network services.
17
What is a "QR code phishing" or "quishing" attack?
Using malicious QR codes that redirect users to phishing websites.
Phishing that targets users of quantum computers.
Phishing through handwritten letters.
Phishing using Morse code.
18
What role do social media platforms play in phishing attacks?
They automatically filter out all phishing attempts.
They provide secure channels for communication.
Attackers use them to gather personal info or spread malware.
They are rarely used for phishing.
19
What is a "water holing" attack?
Ban all internet access at work.
A type of phishing that uses watermarks on fake documents.
Compromising a website commonly visited by a specific group of users.
A widespread phishing campaign targeting many unrelated individuals.
20
Which of these is a red flag that an email might be a phishing attempt?
The email comes from a well-known company's official email address.
The email contains urgent requests or threats.
The email is addressed to a specific person by name.
The email has perfect grammar and spelling.
21
What is the significance of the "S" in "HTTPS" when visiting a website?
It indicates the website is running on a faster server.
It stands for "Secure" and indicates the connection is encrypted.
It signifies that the website is free of advertisements.
It means the website is guaranteed to be legitimate.
22
What is the role of spam filters in preventing phishing attacks?
They encrypt all incoming emails.
They automatically respond to suspicious emails.
They block many known phishing emails using various criteria.
They guarantee that no phishing emails will ever reach your inbox.
23
What should a company do to protect its employees from phishing attacks?
Only allow the use of personal email accounts.
Provide regular cybersecurity awareness training.
Ban all internet access at work.
Install expensive hardware firewalls and ignore user education.
24
What is "vishing"?
Phishing through visual advertisements.
Phishing conducted over the phone or voice messages.
Phishing using website pop-ups.
Phishing through physical mail.
25
What is the purpose of a "typosquatting" or "domain spoofing" attack in phishing?
Creating a fake site with a slightly altered domain to trick users.
To improve the website's search engine ranking.
To make the website load faster.
To encrypt the website's content.
26
What is the purpose of a phishing simulation exercise within an organization?
To test the speed of the company's network.
To intentionally infect employees' computers with viruses.
To educate employees about phishing tactics and assess their susceptibility
To block employees from accessing certain websites.
27
Why are older adults often targeted in phishing scams?
They may be less familiar with online threats and more trusting.
They are more likely to have outdated technology.
They are less likely to use the internet.
They generally have less valuable personal information.
28
What should you do if you receive a suspicious email asking for your login credentials?
Don't click links or provide info; verify through official channels.
Reply to the email asking for more details.
Forward the email to all your contacts to warn them.
Click on the provided link and update your information immediately.
29
What is a "pharming" attack?
A phishing attack that uses flashing images.
Redirecting users to a fake website even if they type the correct URL.
A type of phishing that targets farmers.
Phishing using physical mail with fake invoices.
30
Which of the following is a common method used in phishing attacks?
Broadcasting radio signals.
Sending deceptive emails or messages.
Physically tampering with computer hardware.
Sending encrypted files.

PHISING Flashcards | StudBud