A user receives an email that appears to be from the company's IT department, stating that their email password will expire in 24 hours and asks them to click a link to renew it. The link goes to a page that looks exactly like the company's login portal, but the URL is slightly different. The user enters their credentials and submits. Later, the user receives another email from their bank asking to confirm a large transaction. Which TWO types of attacks have occurred in this scenario? (Choose two.)

Spear phishing

Spear phishing uses personalized information to target specific individuals or groups. The email in the scenario is generic (IT department announcement) and does not indicate personalization, so it is not spear phishing.

Whaling

Whaling specifically targets executives or high-profile individuals. The scenario does not identify the user as an executive, so whaling is not indicated.

What does this 220-1101 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Phishing — The initial email is a classic phishing attack, where the attacker impersonates a trusted entity to steal login credentials. After obtaining the credentials, the attacker gains access to the user's email and potentially other accounts. The subsequent unauthorized bank transaction constitutes identity theft, as the attacker uses stolen identity information to commit fraud. Spear phishing targets a specific individual or group with customized content, but the generic IT department email does not show targeting. Whaling is a type of spear phishing aimed at high-level executives; the user is not identified as a high-value target.

What should I do if I get this 220-1101 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.