FC0-U71 Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Rootkit

  Why it's wrong here

  A rootkit hides deep in the operating system to maintain privileged, persistent access, so it cannot be delivered by a deceptive email link alone. It is tempting because rootkits also involve attacker access, but they are the right answer when malware conceals itself in kernel or firmware components, not when spoofing a sender's address.

• ✓

  Phishing

  Why this is correct

  Phishing impersonates a trusted entity by email to trick the recipient into clicking a link and surrendering credentials. The misspelled sender address is the classic spoofing indicator, distinguishing it from malware, which requires execution, or social engineering conducted through other channels.

• ✗

  Tailgating

  Why it's wrong here

  Tailgating is a physical social-engineering technique where an attacker follows an authorised person through a secured door; it involves no email, link or spoofed sender address. It would be correct if the scenario described someone entering a restricted building without presenting their own credentials.

• ✗

  Ransomware

  Why it's wrong here

  Ransomware encrypts files and demands payment, so it describes the payload rather than the deceptive email itself. It would be the correct answer if the stem described files becoming inaccessible with a payment demand, not a misspelled sender address requesting credential verification.