Email Attacks GCIL Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   An employee receives an email from an unknown sender with a subject line 'Invoice #2847' and an attached .docm file. The employee opens the attachment, and macros execute, downloading ransomware. Which email attack vector was used?

   • ADeceptive link
   • BBusiness email compromise
   • CMalicious attachment
   • DWhaling
   Reveal Solution Discussion Select an answer first
2. 2application · easy

   A user receives an email that appears to be from a colleague, with a message saying 'Check this document' and a link to a file-sharing site. The user hovers over the link and sees that the URL points to an unfamiliar domain. What should the user do?

   • AReport the email to the security team without clicking the link
   • BForward the email to other colleagues to see if they received it too
   • CClick the link to see what it is, then report it if it looks suspicious
   • DReply to the sender to ask if they sent the email
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary characteristic that distinguishes spear phishing from general phishing?

   • ASpear phishing is sent from a compromised internal email account
   • BSpear phishing uses malicious attachments, while general phishing uses links
   • CSpear phishing only targets executives, while general phishing targets all users
   • DSpear phishing is targeted and personalized for a specific individual or organization
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst notices that a senior engineer received an email that referenced a specific internal project name, the engineer's recent code commit, and a personal hobby mentioned on a public conference bio. The email contained a link to a fake login page. Which type of email attack is this?

   • AGeneric phishing
   • BSpear phishing
   • CBusiness email compromise
   • DWhaling
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which scenario best exemplifies a spear phishing attack?

   • AAn email with a link to a fake login page for a popular online store
   • BAn email sent to thousands of users with a generic subject line 'Your account is compromised'
   • CAn email addressed to the finance department that references a recent invoice from a known vendor and asks for payment to a new bank account
   • DAn email that appears to be from a social media platform asking you to confirm your password
   Reveal Solution Discussion Select an answer first