Skip to content

CMA Intermediate · Operations Management and Strategic Management · Digital Strategy

A Mumbai-based retailer receives an email that appears to come from its bank, asking staff to click a link and enter their net-banking credentials to avoid account suspension. Which type of cyber attack does this best describe?

The scenario is phishing. The attacker poses as the bank through a deceptive email and lures employees into entering credentials on a fake page. It relies on social engineering rather than flooding servers, injecting code into databases, or intercepting network traffic.

  1. APhishingCorrect
  2. BDistributed denial-of-service attack
  3. CSQL injection
  4. DMan-in-the-middle attack on a network switch

Explanation

The attacker impersonates a trusted entity through email to trick users into revealing credentials, which is phishing. A DDoS attack floods a server with traffic, SQL injection exploits database queries, and a man-in-the-middle attack intercepts communications; none of these involve deceiving users via a fake email link.

Did you get it right without looking?

One question tells you little. A timed set on Digital Strategy shows your real accuracy, how long you take and where you lose marks.

More Digital Strategy questions