English
Menu

Information Security Basics

Which combination correctly gives the phishing technique and a countermeasure on the user's side?

  1. AHuge numbers of packets are sent to bring a server down. Increase the capacity of the server's line
  2. BFiles on a PC are encrypted and a ransom is demanded. Keep offline backups
  3. CEmails or text messages posing as real companies lure users to fake websites to enter and steal IDs, passwords, card numbers and so on. Access sites from bookmarks or official apps rather than from links in messages
Show answer and explanation

Answer: C. Emails or text messages posing as real companies lure users to fake websites to enter and steal IDs, passwords, card numbers and so on. Access sites from bookmarks or official apps rather than from links in messages

Phishing uses emails or text messages (attacks via SMS are also called smishing) posing as financial institutions, online shops, delivery companies, government agencies and others to lure users to fake websites that look just like the real ones, where they are tricked into entering IDs and passwords, credit card numbers, one-time passwords and so on, which are then stolen. The URLs of fake sites often use domain names very similar to the real ones, making them hard to tell apart by appearance alone. On the user's side, effective measures include not entering important information through links in emails or text messages, opening sites from bookmarks or official apps, and enabling multi-factor authentication. On the service side, sender domain authentication (SPF, DKIM and DMARC) makes it harder for emails impersonating the company to be delivered.

  • A. Bringing a server down with huge numbers of packets describes a DDoS attack.
  • B. Encrypting files and demanding a ransom describes ransomware.
  • C. Correct. Luring users to fake sites to steal information is phishing, and opening sites through official routes instead of links is a countermeasure.
Practice this topic Back to topic

Related calculators

Password Brute-Force Time CalculatorCompute the number of combinations and the entropy from the character set and length, and estimate brute-force timeCVSS calculator (v3.1)Compute the CVSS v3.1 base score of a vulnerability from the eight base metrics or a vector string

Books on Information Security Basics Ad

As an Amazon Associate I earn from qualifying purchases.

More Information Security Basics questions

  1. Which of the following is an example of social engineering?
  2. An email claiming to be from a contact at a business partner says, "Our account for receiving payments has changed, so please pay this invoice and future ones to the new account." When business email compromise (BEC) is suspected, what is the most appropriate response?
  3. In a web application, entering a string such as ' OR '1'='1 in the password field of the login screen lets someone log in without knowing the password. What is this attack called?
  4. As a countermeasure against SQL injection, why are prepared statements with placeholders (parameterized queries) considered more fundamental than removing dangerous characters from the input?
  5. A bulletin-board web application had a vulnerability in which scripts contained in text posted by users were executed in other visitors' browsers. Which combination correctly gives the name of this vulnerability and its fundamental countermeasure?