Exam SY0-601 topic 1 question 717 discussion

C. Phishing This is the classic example of a phishing attack.

Option A:: Spear Phishing Spear phishing is a targeted phishing attack. While phishing emails are sent en masse, spear phishing emails are sent to just one person or organization.

YAP I thought A first but you have to know the person/group who you're trying to scam

It's C: Phising. It can't be A: Spear Phising. Why? Because in Spear Phising fraudsters impersonate specific people that the victim knows and trusts, sending them messages, often containing information from their private life that is important for their credibility. Here they don't know anything completely about this person, they want only to get information from this person

A typical spear phishing attack includes includes information specifically related to the target, often including the target's name and position within the organization.techniques Phishing emails are part of mass campaigns in which the pretext is designed to appeal to as many potential targets as possible

C. Phishing Hey, you won, but we don't know who you are..I am literally shaking my head at the quality of these questions.

Phishing seems like the correct answer to me. It is my understanding that spear fishing is not merely a phishing email sent to one person, but rather a tailored phishing email where the attacker incorporates knowledge pertaining to that specific individual (a document they were working on, or maybe a project they are in charge of). Furthermore, based on the wording of the question, we are unable to verify whether this email was sent en masse. All it mentions is that it was directed at an employee of a company. Was it sent to others? We don't know. There is no evidence to suggest that only this one employee received the email, so the "en masse" justification others have mentioned to eliminate phishing as an answer choice seems ill-advised

This is targeted, unlike Phishing that's a mass mailing. Its spearing.

Since this was directed at the specific employee, this phishing attempt is specifically targeting an individual and is personalized with information about the employee, it would be more accurately described as "spear phishing." Spear phishing is a more targeted form of phishing where the attacker customizes their approach based on specific information about the target, making it more convincing

C. Phishing attack

C. Phishing