SecurityQuestion 29 of 100
A user receives an email that appears to be from the company's bank, urging them to click a link and confirm their password immediately. What type of attack is this?
a.Phishing
b.DDoS
c.SQL injection
d.Zero-day exploit
Explanation
Phishing uses fraudulent messages impersonating a trusted party to trick users into revealing credentials or clicking malicious links. A DDoS floods a service with traffic, and SQL injection targets databases, neither of which fits this scenario.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which type of malware encrypts a victim's files and demands payment in exchange for the decryption key?
- An attacker follows an authorized employee through a secured door before it closes, without presenting their own badge. What is this physical technique called?
- Which authentication approach requires two or more independent factors, such as a password plus a code from an authenticator app?
- Which practice grants each user only the minimum permissions needed to perform their job, reducing the impact of a compromised account?
- Which type of malware disguises itself as legitimate software to trick a user into installing it, then performs malicious actions in the background?
- A technician wants to protect a laptop's data so it cannot be read if the device is lost or stolen. Which control best achieves this?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against CompTIA A+ Core 2 (220-1102) · How we review