Creating Phishing Emails with AI GOAA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key legal consideration when using AI to generate phishing emails for a security test?

   • AThe emails must be written in a specific language
   • BThe emails must be sent from a personal email account
   • CThe AI model used must be open-source
   • DThe test must comply with relevant laws and regulations, such as data protection and computer fraud statutes
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which capability of natural language processing (NLP) is most directly leveraged when an AI model generates a phishing email that mimics the writing style of a specific executive?

   • APart-of-speech tagging to label each word in the email
   • BNamed entity recognition to identify the executive's name
   • CSentiment analysis to gauge the emotional tone of the email
   • DText generation conditioned on stylistic patterns and context
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security team is developing an internal tool to generate phishing emails for training purposes. The tool uses an AI model and is designed to create realistic emails based on a user's role and department. The team wants to ensure the tool is used ethically and legally. Which feature is most important to include?

   • AA feature that automatically sends the generated emails to the intended targets.
   • BA feature that generates emails with no disclaimers to make them more realistic.
   • CA logging mechanism that records who uses the tool and for what purpose.
   • DA feature that allows users to input any employee's personal data for personalization.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester is crafting a phishing email for a client that uses a specific project management tool. The tester wants the email to reference a recent project update to increase realism. Which prompt would best achieve this?

   • AWrite an email that looks like it is from a project manager and mentions a project update.
   • BWrite an email from the project manager about a new update in the 'AcmePM' tool, asking the recipient to review the changes.
   • CWrite an email that asks the recipient to click a link to view a project update.
   • DWrite a phishing email that uses urgency and fear to make the recipient act quickly.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which structural feature is often present in AI-generated phishing emails but less common in legitimate emails?

   • AMultiple images and embedded media
   • BA single call-to-action link or button
   • CA clear subject line that matches the email body
   • DA signature block with full contact details
   Reveal Solution Discussion Select an answer first