CompTIA Security+ (SY0-601) — Question 511

An employee receives an email stating the employee won the lottery. The email includes a link that requests a name, mobile phone number, address, and date of birth be provided to confirm employee's identity before sending the prize. Which of the following best describes this type of email?

Answer options

• A. Spear phishing
• B. Whaling
• C. Phishing
• D. Vishing

Correct answer: C

Explanation

The correct answer is C, as this scenario exemplifies phishing, where attackers attempt to trick individuals into providing sensitive personal information. Spear phishing (A) targets specific individuals or organizations, whaling (B) focuses on high-profile targets, and vishing (D) involves voice phishing, which does not apply here as the method used is email.