Table of Contents
Question
An attacker sends a fake login page to an employee, tricking them into entering their credentials. What type of attack is this?
A. Spoofing
B. Social engineering
C. Phishing
D. Credential stuffing
E. DNS poisoning
Answer
C. Phishing
Explanation
Phishing involves tricking users into entering sensitive information on fake websites.
What attack tricks users into entering credentials on a fake login page? Learn how phishing uses deceptive websites and emails to steal sensitive information—essential knowledge for the Cisco Certified Support Technician (CCST) Cybersecurity 100-160 exam.
The described attack is phishing.
- Phishing is a cyberattack where an attacker impersonates a legitimate entity—such as a company or trusted individual—using emails, fake websites, or other communications to trick users into divulging sensitive information like usernames and passwords.
- In this scenario, the attacker sends a fake login page to an employee, prompting them to enter their credentials. The fake page is designed to look authentic, but any information entered is sent directly to the attacker.
- Phishing attacks exploit human trust and urgency, often using convincing language and branding to increase the likelihood of success.
- This technique is one of the most common and effective social engineering methods, and it is frequently used to gain unauthorized access to accounts, steal data, or launch further attacks within an organization.
Phishing attacks use fake websites or login pages to deceive users into entering sensitive information, which is then harvested by the attacker.
Cisco Certified Support Technician (CCST) Cybersecurity 100-160 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Cisco Certified Support Technician (CCST) Cybersecurity 100-160 exam and earn Cisco Certified Support Technician (CCST) Cybersecurity 100-160 certification.