Threats & AttacksQuestion 1 of 100
An attacker sends an email that appears to come from the company CEO, urgently asking the finance team to wire funds to a new vendor. What type of social engineering attack is this?
a.Vishing
b.Business email compromise
c.Watering hole attack
d.Tailgating
Explanation
Business email compromise (BEC) impersonates a trusted executive or partner to trick employees into transferring money or sensitive data. It relies on authority and urgency rather than malware. Because it uses legitimate-looking email, it often bypasses technical filters and targets human judgment.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which malware type encrypts a victim's files and demands payment for the decryption key?
- A user reports that their credentials worked on a fake login page that looked identical to the corporate portal. Which attack most likely occurred?
- Which term describes a previously unknown software vulnerability for which no patch yet exists?
- An attacker overwhelms a web server with traffic from thousands of compromised devices, making it unavailable. What is this called?
- Which type of threat actor is typically well-funded, highly skilled, and motivated by espionage on behalf of a government?
- A disgruntled employee copies confidential designs to a USB drive before resigning. This is an example of what threat?
Last reviewed: · editorial process
Sen Lin, PrepPass Founder · Verified against CompTIA Security+ (SY0-701) · How we review