A security analyst notices that several employees have received an email with the subject line 'Urgent: Password Reset Required'. The email contains a link to a website that mimics the company's internal login portal. The email was sent from an external domain and addresses recipients by 'Dear Employee' rather than their actual names. Which type of social engineering attack is being described?

Spear phishing

Spear phishing is a targeted form of phishing that uses personalized information (e.g., the recipient's name) to increase credibility. The email in the scenario uses a generic greeting, indicating it is not tailored to specific individuals.

Vishing

Vishing (voice phishing) is conducted via phone calls or voicemail, not email. The attack described uses email as the vector.

Tailgating

Tailgating is a physical security breach where an attacker follows an authorized person into a restricted area without proper authentication. This scenario involves digital deception, not physical access.

What does this SY0-701 question test?

OSPF neighbours must agree on key parameters.

What is the correct answer to this question?

The correct answer is: Phishing — This scenario describes a phishing attack. Phishing involves sending deceptive emails that appear to be from a legitimate source to trick recipients into revealing sensitive information, such as login credentials. The use of a generic greeting and a spoofed login page are classic indicators. Spear phishing would involve personalization (e.g., using the recipient's name) and targeting specific individuals. Vishing is a voice-based attack conducted over the phone. Tailgating is a physical security attack where an unauthorized person follows an authorized person into a restricted area.

What should I do if I get this SY0-701 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.