FC0-U71 Security Practice Question
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the email address is slightly misspelled (e.g., 'support@bankk.com' instead of 'support@bank.com'). Which type of attack is this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Phishing
Phishing is a social engineering attack where attackers send fraudulent emails pretending to be from legitimate sources to steal sensitive information.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Smishing
Why it's wrong here
Smishing is phishing via SMS text messages, not email.
- ✓
Phishing
Why this is correct
This is a classic example of a phishing email attempting to trick the recipient.
- ✗
Spear phishing
Why it's wrong here
Spear phishing is targeted at a specific individual, but the question does not indicate targeting.
- ✗
Vishing
Why it's wrong here
Vishing is voice phishing over the phone.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
4 more ways this is tested on FC0-U71
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user suspects it is a phishing attempt. Which type of phishing attack is this most likely to be?
medium- A.Vishing
- ✓ B.Spear phishing
- C.Whaling
- D.Smishing
Why B: Spear phishing targets specific individuals or organizations, often using personalized information to appear legitimate.
Variation 2. A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user notices the sender's email address is slightly misspelled. Which type of threat is this?
medium- A.Rootkit
- ✓ B.Phishing
- C.Tailgating
- D.Ransomware
Why B: Phishing is a social engineering attack where attackers send fraudulent emails to steal sensitive information.
Variation 3. A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The email contains urgent language and threats of account closure. What type of attack is this?
medium- A.Spear phishing
- B.Smishing
- ✓ C.Phishing
- D.Vishing
Why C: Phishing is a social engineering attack where attackers impersonate a legitimate entity to steal sensitive information.
Variation 4. A user receives an email from their bank asking them to click a link and verify their account information. The email contains spelling errors and the sender's address looks suspicious. Which type of social engineering attack is this?
medium- A.Spear phishing
- B.Pretexting
- C.Vishing
- ✓ D.Phishing
Why D: Phishing is a social engineering attack where attackers send deceptive emails to trick recipients into revealing sensitive information.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.