Ethical Hacking Essentials Practice Test

Which attack method is commonly used to trick users into revealing sensitive information?

1. Denial-of-service attack

2. SQL Injection

3. Phishing

4. Brute force attack

The correct answer is: Phishing

Phishing is an attack method specifically designed to deceive users into divulging sensitive information, such as usernames, passwords, or credit card numbers. It typically involves the attacker masquerading as a trustworthy entity, often through fraudulent emails or websites that resemble legitimate ones. This manipulation preys on human psychology, prompting users to click on links or provide information under the false pretense of security or urgency. Unlike denial-of-service attacks, which aim to overwhelm systems and disrupt services; SQL injection, which exploits database vulnerabilities to access or manipulate data; and brute force attacks, which involve systematically trying various passwords to gain unauthorized access, phishing uniquely targets the user through emotional and psychological manipulation. This focus on user interaction makes phishing a prevalent and effective method for attackers seeking confidential data.