Which two statements about phishing are correct? (Choose two.)
- Phishing is a common social engineering technique.
- Phishing is not usually common in social media, but more for marketing and advertising.
- Phishing email is usually a legitimate email sent from a large, legitimate organization.
- The goal is to provide the consumer with legitimate choices for products and services.
- The goal is to get the victim to enter personal information.
Explanation: Phishing is a widespread technique categorized under social engineering, which involves manipulating people into performing specific actions or divulging confidential data.
A typical phishing attack uses an email that pretends to be from a large, legitimate organization. Because these organizations are well-known, the victim is more likely to trust the message and visit a malicious website that closely resembles the official one. The ultimate goal of this deception is to trick the victim into entering personal information, such as account numbers, social security numbers, usernames, or passwords. Unlike legitimate marketing or advertising, phishing is entirely malicious and designed for data theft rather than providing consumer choices.
Related exam: Modules 14 – 16: Checkpoint Exam: Network Security Answers (CCNP ENCOR v9)
