GIAC Foundational Cybersecurity Technologies Practice Test

What is Phishing?

1. An email that encourages people to click on malicious links or download malicious files

2. Where you send out emails to attackers in hopes one clicks on it to report to local police

3. A great outdoor sport

4. None of the above

The correct answer is: An email that encourages people to click on malicious links or download malicious files

Phishing is a form of cyber attack often executed through deceptive emails that aim to trick recipients into clicking on malicious links or downloading harmful files. This technique exploits human psychology by creating a sense of urgency or curiosity, prompting individuals to take action without carefully assessing the risks. Phishing attacks can lead to serious consequences, including the theft of sensitive information, unauthorized access to accounts, or the installation of malware on devices. The emphasis of phishing is on manipulation through communication, which aligns precisely with the description provided in the correct option. Other choices, while creatively framed, do not accurately capture the essence of phishing. For example, sending out emails to unidentified "attackers" in hopes of reporting those who respond is not reflective of the intent or practice associated with phishing. Similarly, categorizing phishing as a sport misrepresents its focus as a cybersecurity threat. Thus, the clear definition of phishing as an email-driven deception involved in compromising security supports the correctness of the selected answer.