Email Attacks GCIL Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which of the following is an indicator that an email may be spoofed?

   • AThe email contains a link to a website that uses HTTPS
   • BThe email was sent during business hours
   • CThe 'Reply-To' address differs from the 'From' address
   • DThe email contains a digital signature from a trusted certificate authority
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Why is user awareness and training important in defending against email attacks?

   • AIt helps users recognize and report suspicious emails, reducing the likelihood of successful attacks
   • BIt prevents attackers from sending emails to the organization
   • CIt ensures that all email attachments are automatically scanned for malware
   • DIt eliminates the need for technical email security controls
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company wants to reduce the success of BEC and phishing attacks. They have implemented DMARC and email filtering, but users still occasionally fall for well-crafted lures. Which additional control would be most effective in reducing the impact of a user clicking a malicious link?

   • ABlock all email attachments with macros
   • BIncrease the frequency of phishing simulations
   • CRequire users to report suspicious emails to a mailbox
   • DImplement multi-factor authentication (MFA) for all user accounts
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An organization's security team notices that attackers are sending emails that appear to come from the company's own domain (e.g., @company.com) to employees. The emails pass SPF and DKIM checks. Which additional control would most directly help prevent these spoofed emails from reaching employees?

   • AConfigure the email gateway to quarantine all external emails
   • BTrain employees to check the display name of the sender
   • CImplement a DMARC policy of 'reject' for the company domain
   • DAdd more SPF records to include all possible sending IPs
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company has a mature security awareness program, but employees still occasionally fall for phishing emails that use urgent language and impersonate executives. The security team wants to reduce the success rate further. Which approach would be most effective?

   • AIncrease the frequency of phishing simulations to weekly
   • BImplement a reporting button and provide positive reinforcement for reporting suspicious emails
   • CSend a company-wide email warning about the latest phishing campaign
   • DDisable the ability to forward emails to external addresses
   Reveal Solution Discussion Select an answer first