eBay is an example of an online company that has been faced with numerous security issues. For example, imagine you purchase a digital camera on eBay. Three months later you might receive an email asking you to log in to the system to update your credit card or PayPal information. Of course, this email is not actually from eBay and as soon as you log in your information will be stolen. What type of information security breach would you consider this to be?

Question

BlackTom AI · Accepted Answer

To analyze the scenario, I will evaluate what each option commonly means in information security.
Option 1: Phishing. This describes emails or messages that appear to come from a legitimate organization (here, eBay) and prompt the user to provide sensitive information by logging into a fake portal. The goal is to steal credentials or payment data, which matches the described situation where clicking a fraudulent link leads to stolen information. This option correctly captures the breach type.
Option 2: An Insider. An insider breach involves someone within the organization who has legitimate access and misuses it, such as an employee stealing data or credentials. In the scenario, the attacker impersonates the legitimate site via email rather than abusing internal access, so this is not an insider breach.
Option 3: Social Engineering. Social engineering is the broader discipline of manipulating people to reveal confidential information. While the scenario is indeed a social engineering tactic (phishing is a form of social engineering), the term Phishing specifically identifies the concrete method used (a deceptive email directing users to a fraudulent login). Therefore, calling it simply social engineering would be accurate but less precise in this context.
Option 4: Dumpster Diving. Dumpster diving refers to retrieving discarded physical materials (like papers with login details) from trash to obtain information. The described attack is digital and involves email phishing, not physical data recovery, so this option is not applicable.
In summary, the scenario aligns best with phishing, a targeted form of social engineering that uses deceptive emails to steal login credentials and payment information from victims. The other options either describe a different breach type or are too broad or inapplicable to the described email-based attack.

MANAGEMENT INFORMATION SYSTEMS CIS 3010-16 (93684) Final Exam 12/11/25 - SH 358A 12:00 - 1:15 pm

查看解析

登录即可查看完整答案

类似问题

Which of the following is a common Internet scam in which an email is sent from someone posing as your bank or other legitimate business asking for personal information?

Part 1If you receive an email asking for your social security number in return for a million dollars, this is an example of ____________. Part 1 A. phishing B. evil twins C. IP spoofing D. war driving E. pharming

________ is a type of identity theft that uses deceptive emails and fraudulent web and online mobile sites to fool users into divulging personal data.

The practice of using fake business emails in order to trick users into divulging personal data, such as usernames and passwords, is called:

更多留学生实用工具

考试浏览器助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单