A successful phishing attack may give an attacker control of an end-user device or stolen credentials.
Answer
true
Explanation
### Why this is right
The course material states that successful phishing can lead to control over an end-user device or stolen credentials. Either outcome can help an attacker gain or retain access.
### The concept
Phishing is one possible route to initial compromise because it targets users rather than relying only on perimeter weaknesses. Stolen credentials may let an attacker act as a legitimate account, while control of a device can provide a foothold in the environment. These are possible outcomes, not a guarantee that every phishing attempt succeeds.
### Terms
- **Credential**: Information used to prove identity when accessing a system.
- **End-user device**: A device used by a person to access organizational systems.
### Remember
Phishing can compromise either a user's access details or their device.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free