Question 6
What can happen if you follow a link or download an attachment in a phishing email?
- An attacker may steal sensitive information or gain unauthorized access.
- The IT department will always block the attack, so no harm will occur.
- Both A and B
- None
Question 7
Which controls directly reduce the effectiveness of email domain spoofing?
- SPF enforcement
- DKIM signing
- DMARC with p=reject
- All of the above
Question 8
What is the PRIMARY weakness exploited in pretexting attacks?
- Lack of encryption
- Weak authentication
- Assumptions about legitimacy based on narrative consistency
- Tool misconfiguration
Question 9
Why does DMARC with a "p=reject" policy significantly raise the bar for spoofing attacks?
- It encrypts the sender’s identity
- It forces authenticated alignment or causes message rejection
- It validates user intent
- It blocks malicious content
Question 10
Which action could accidentally CONFIRM your email is active to scammers?
- Deleting the email
- Reporting the email
- Clicking "unsubscribe" on a suspicious email
- Ignoring the email