Digital Forensic Certification Practice Exam

What type of attack was performed by Tanner when he sent a fake email to Killian?

1. Unvalidated redirects and forwards

2. Phishing attack

3. SQL injection

4. Cross-site scripting

The correct answer is: Unvalidated redirects and forwards

The scenario described involves sending a fake email, which is characteristic of a particular type of social engineering attack aimed at tricking the recipient into divulging sensitive information or performing actions that compromise security. A phishing attack typically involves targeting individuals through fraudulent communications, often masquerading as trustworthy entities. This method usually involves emails designed to incite urgency or manipulate emotions, convincing the recipient to click on malicious links or provide personal information, such as passwords or credit card numbers. The goal is to obtain sensitive data or access to secure systems without the target's knowledge or consent. Unvalidated redirects and forwards, SQL injection, and cross-site scripting focus more on technical vulnerabilities and attacks rather than directly misleading individuals via fraudulent messages. These methods are aimed at exploiting flaws in web applications and environments rather than leveraging deceit through communication. Thus, the nature of the email sent by Tanner aligns closely with the definition and purpose of a phishing attack.