CompTIA Security+ (SY0-601) — Question 498

Which of the following threat vectors would appear to be the most legitimate when used by a malicious actor to impersonate a company?

Answer options

• A. Phone call
• B. Instant message
• C. Email
• D. Text message

Correct answer: C

Explanation

Email is often perceived as a formal communication channel, making it more believable for impersonation compared to other methods. While phone calls, instant messages, and text messages can also be used for phishing, they may not carry the same level of authenticity that an email does, especially when mimicking a company's branding and communication style.