Email Attacks GCIL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has experienced several successful phishing attacks despite having an email gateway. The security team wants to reduce the likelihood of users falling for these attacks. Which approach is most effective as a complementary control?

   • AIncrease the frequency of password changes for all users
   • BConduct regular, realistic phishing simulations and provide immediate feedback to users
   • CSend a monthly newsletter with general security tips
   • DDisable all external email for the organization
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company's security team is investigating a phishing email that spoofed the company's own domain. The email passed SPF but failed DKIM. The company has a DMARC policy of quarantine. What should the team check first to understand why the email was not rejected?

   • ACheck whether the SPF alignment is set to relaxed or strict
   • BCheck whether the email was sent from an internal IP address
   • CCheck whether the DKIM signature used a weak algorithm
   • DCheck whether the email client displayed the sender as 'Internal'
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which email authentication protocol uses digital signatures to verify the integrity and authenticity of an email message?

   • ATLS
   • BDKIM
   • CSPF
   • DDMARC
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An accounts payable clerk receives an email from a vendor's email address that has been compromised. The email requests that future payments be sent to a new bank account. The clerk verifies the change by calling the vendor's known phone number, and the vendor confirms the request is fraudulent. Which type of email attack occurred?

   • AWhaling
   • BSpear phishing
   • CBusiness email compromise (BEC) via vendor impersonation
   • DMalware delivery
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following best describes the primary vector for a business email compromise (BEC) attack?

   • AA deceptive email that impersonates a trusted executive to authorize a fraudulent wire transfer
   • BA phishing email that lures the recipient to enter credentials on a fake login page
   • CAn email containing a link to a drive-by download exploit
   • DA malicious attachment that installs ransomware when opened
   Reveal Solution Discussion Select an answer first