Cybersecurity: Understanding Phishing Attacks Answers Quiz on Phishing 1. What is the primary goal of phishing attacks? A. To create legitimate communications B. To improve cybersecurity knowledge C. To promote security software D. To steal sensitive information Answer: To steal sensitive information (D) Phishing attacks aim to steal sensitive information such as usernames and passwords. 2. Which type of phishing specifically targets high-profile individuals? A. Whaling B. Deceptive Phishing C. Clone Phishing D. Spear Phishing Answer: Whaling (A) Whaling is a variation of spear phishing focused on high-profile targets. 3. What technique involves creating a nearly identical copy of a legitimate email to trick the victim? A. Angler Phishing B. Pharmaceutical Phishing C. Clone Phishing D. Spear Phishing Answer: Clone Phishing (C) Clone Phishing involves creating a copy of a legitimate email with malicious intent. 4. Which phishing technique targets social media users through fake messages and advertisements? A. Smishing B. Angler Phishing C. Vishing D. Typosquatting Answer: Angler Phishing (B) Angler Phishing specifically targets social media users with deceptive tactics. 5. What is an effective prevention technique against phishing emails? A. Using strong email filtering B. Ignoring email attachments C. Clicking on unfamiliar links with caution D. Opening all emails carefully Answer: Using strong email filtering (A) Implementing strong email filters is crucial for detecting and blocking phishing emails. 6. What aspect of phishing attacks do security awareness training programs primarily address? A. Developing software to block emails B. Establishing IT security policies C. Identifying and reporting phishing attempts D. Creating secure passwords Answer: Identifying and reporting phishing attempts (C) Security awareness training helps employees recognize and report phishing attempts. 7. What does vishing utilize to conduct phishing attacks? A. Voice communication B. Fake websites C. Social media posts D. Email messages Answer: Voice communication (A) Vishing leverages voice communication, typically over the phone, to deceive victims. 8. How do deceptive phishing attacks primarily deceive victims? A. By creating realistic social media profiles B. By sending official-looking emails or fake websites C. By using shared public Wi-Fi D. By impersonating tech support Answer: By sending official-looking emails or fake websites (B) Deceptive phishing attacks trick victims through fake emails or websites that appear legitimate. 9. What is one feature of phishing emails that often indicates malicious intent? A. Personalized greetings using the recipient's name B. Professional language and formatting C. Requests for personal information D. Clear and concise subject lines Answer: Requests for personal information (C) Phishing emails commonly request sensitive information, which is a red flag. 10. Which method enhances account security by requiring more than just a password? A. Using similar passwords across accounts B. Regular password changes C. Two-Factor Authentication (2FA) D. Checking for security indicators in emails Answer: Two-Factor Authentication (2FA) (C) Two-Factor Authentication significantly strengthens account security. 11. What should you do before clicking on links in an email? A. Only click if it’s from a known sender B. Open the link in a new tab C. Copy the link to ensure safety D. Examine the URL carefully Answer: Examine the URL carefully (D) Carefully examining the URL can help identify potentially harmful links. 12. Which characteristic is NOT typically found in phishing emails? A. Generic greetings B. Urgent tone C. Attention to detail in grammar D. Specific requests for information Answer: Attention to detail in grammar (C) Phishing emails often contain errors, while legitimate emails are usually wellwritten. 13. What is a recommended practice to prevent loss of important data? A. Use the same password for multiple accounts B. Regularly back up data C. Avoid software updates D. Click on all email links to check their validity Answer: Regularly back up data (B) Regular data backups are crucial for preventing data loss in case of breaches. 14. When evaluating a website for safety, what should you look for? A. A security indicator such as HTTPS B. How many ads are on the page C. Generic domain names D. The website's age and reputation Answer: A security indicator such as HTTPS (A) Checking for HTTPS in the URL is essential for verifying a website's security. 15. What should you do if you observe a phishing attempt? A. Report it immediately B. Ignore it C. Reply to the email for clarification D. Forward it to friends Answer: Report it immediately (A) Reporting phishing attempts helps combat and eliminate such threats. 16. Which of the following is a common tactic used by phishing emails? A. Direct communication without attachments B. Consistent formatting and branding C. Creating a false sense of urgency D. Informative subject lines Answer: Creating a false sense of urgency (C) Phishing emails often create urgency, pressuring recipients to act quickly.