Creating Phishing Emails with AI GOAA Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A red teamer is using an AI model to generate a phishing email that targets a specific employee. The red teamer has access to the employee's job title and recent project. Which approach would most effectively use this information?

   • AInclude the job title and project in the prompt to generate a personalized email that references both.
   • BUse the project only, as the job title is not necessary for personalization.
   • CAsk the AI to generate a generic email and then manually add the job title and project.
   • DUse the job title only, as including the project may make the email too specific and suspicious.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which linguistic cue is commonly associated with AI-generated phishing emails?

   • AUse of emojis and informal slang
   • BOverly formal and grammatically perfect language
   • CLack of any personalization or context
   • DFrequent spelling errors and inconsistent punctuation
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A security analyst is authorized to conduct a phishing simulation for a company. The analyst uses an AI tool to generate the email. Which action is most appropriate to ensure the simulation remains ethical and legal?

   • AUse a personal email account to send the phishing emails to avoid detection by the company's security team.
   • BInform all employees about the simulation before it begins to avoid any confusion.
   • CObtain written consent from the company's management and ensure the simulation is part of an authorized security assessment.
   • DMake the phishing email as realistic as possible, including real employee names and direct deposit information.
   Reveal Solution Discussion Select an answer first