Mod 7 test

uCertlfy 23FD-ITS415-1 (Based on Systems Securiy Certified Practitioner (SSCP) 00 I v Correct Which statement about phishing attacks is correct? v A D Phishing attacks of all kinds are still in use because they can be effective social engineering tools when trying to do reconnaissance or gain ilicit entry into an organization or its systems. B Phishing attacks are not social engineering attacks C Spear phishing attacks are easy to detect with scanners or filters. D Phishing attacks are rarely successful, and so they pose a very low risk to organizations. Explanation Answer A is correct. Phishing attacks of all kinds are still in use because they can be effective social engineering tools when trying to do reconnaissance or gain illicit entry into an organization or its systems. Option D is false; even if thousands of phishing emails are sent as part of a low-and-slow attack, one response can generate exploitable information for the attacker. Option B is false because the phishing attack is a social engineering attack. Option C is false; attackers work hard to mimic the style, format, expression, and construction of their phishing emails, and continually attempt to spoof email addresses, domain names, and so forth. Tools may filter a lot of such junk email for you, but they won't catch it all. Lesson | Business Continuity via Information Security and People Power CIANA at Layer 8 and Above Exam Objectives 2. Security Operations and Administration 2.7. Participate in security awareness and training us 50f10 Next » @ dTest 3 23FD-ITS415-1 Based on Systems Security Certified Practitioner (SSCP)] e © @ l v Correct uCertify In general, what differentiates phishing from whaling attacks? v A D Phishing attacks tend to be used to gain access to systems via malware payloads or by getting recipients to disclose information, whereas whaling attacks try to get responsible managers to authorize payments to the attacker's accounts. B Phishing attacks are focused on businesses, whereas whaling attacks can be aimed at anybody, anywhere. c Whaling attacks tend to offer something that ought to sound “too good to be true; whereas phishing attacks masquerade as routine business activities such as package delivery confirmations. D There's really no difference. Explanation ITEM LIST Answer A is correct. Phishing attacks tend to be used to gain access to systems via malware payloads or by getting recipients to disclose information, whereas whaling attacks try to get responsible managers to authorize payments to the attacker's accounts. Option B is incorrect; whaling is primarily aimed at senior business leaders, whereas phishing can be aimed at anybody, anywhere, i the attacker perceives there is something worthwhile to leam in doing so. Option C has these reversed; whaling attacks depend on the credibility of the business transaction they request. Option D is incorrect as there is a difference between these two attacks. Business Continuity via Information Security and People Power CIANA at Layer 8 and Above Exam Objectives 2. Security Operations and Administration 2.7. Participate in security awareness and training Retry & Previous 60f10 Next » @ E