Phishing vs Brand Impersonation: Email Credential Theft

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

An employee clicked a link in an email from a payment website that asked the employee to update contact information. The employee entered the log-in information but received a “page not found” error message. Which of the following types of social engineering attacks occurred?

  1. Brand impersonation
  2. Pretexting
  3. Typosquatting
  4. Phishing Correct Answer
Answer Correct answer: D — The attack is classified as Phishing because it uses fraudulent emails to trick users into revealing credentials.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests the ability to distinguish between general social engineering vectors and specific techniques, identifying that while brand impersonation was used, the primary attack type is phishing.

This scenario describes a classic phishing attack where an employee is tricked into revealing credentials via a fraudulent email link. The correct answer is D (Phishing), which is the overarching attack vector.

Many learners select A (Brand Impersonation) because the attacker mimicked a legitimate payment website. However, brand impersonation is a *technique* or *tactic*, whereas Phishing is the broader *attack type* defined by the delivery method (email) and goal (credential harvesting).

Community Discussion (17 comments)

Mehsotopes 👍 13 Selected: D
Phishing is the fraudulent practice of sending emails, or other messages to cause an individual to reveal personal information. This question does not specify if this email was pretexting to butter up the employee, or make email more convincing (pretexting), nor does it specify this email being a trusted brand, or waiting on employee to type incorrectly to steal information.
JackExam2025 👍 2 Selected: D
Phishing is a type of social engineering attack where attackers trick individuals into revealing sensitive information (such as login credentials) by pretending to be a legitimate entity.
examtaker01 👍 3 Selected: D
The correct answer is: ✅ D. Phishing Breakdown; The scenario describes a classic phishing attack, where: The employee receives an email claiming to be from a payment website. The email contains a malicious link that leads to a fake login page. The employee enters their credentials, but instead of proceeding, they get a "page not found" error (likely because the attacker has already captured the credentials). Why A is not the answer; A. Brand impersonation Brand impersonation happens when an attacker pretends to be a legitimate company (e.g., fake social media pages or fake customer service numbers). While phishing often involves brand impersonation, the key element here is credential theft, making phishing the better answer.
Cyberfox9001 👍 1 Selected: D
Phishing consists of sending emails that contain fake information or to acquire information from the user who opens an email.
Hasss 👍 1 Selected: D
They are basically fishing for information that they arent allowed to be privy to.
AryzBeats 👍 1 Selected: D
Phishing is a practice used for sending fraudulent emails in hopes of retrieving sensitive data
deedee2025 👍 1 Selected: D
if a Technique was asked then Brand impersonation would have been the best answer....the best answer is phishing because phishing is a type of attack that involves fraudulent practice of sending email
HungryRightNow 👍 1 Selected: A
This isn't what most people said, so tell me why this wrong: Phishing isn't a wrong answer, but Brand Impersonation -- which can be a type of phishing -- is a the BEST answer.
way12 👍 1 Selected: D
phishing takes place when you receive email asking for personnel information.
JRCHENRY 👍 1 Selected: D
Phishing is a social engineering attack to trick people into releasing their personal information
88d4601 👍 1 Selected: C
Phishing
Juls74 👍 1 Selected: D
Phishing is a social engineering attack where attackers send fraudulent emails or messages that appear to come from reputable sources. These emails often contain links to fake websites that steal personal information, such as login credentials. In this case, the employee was tricked into entering their login information on a phony payment website, resulting in a “page not found” error message.
Gominolo 👍 1 Selected: A
A. Brand impersonation. "In the context of email security, brand impersonation is a form of phishing cyber-attack that aims to solicit sensitive information from victims by posing as a legitimate brand." That reply is more accurate than just Phishing.
[Removed] 👍 1 Selected: D
D. Phishing Phishing involves tricking individuals into providing sensitive information, such as login credentials, by pretending to be a legitimate entity. In this case, the employee was deceived into entering their login information on a fake website that impersonated a payment website.
Luchis_69 👍 2 Selected: D
This ACL configuration first permits outbound DNS traffic originating from the device with the IP address 10.50.10.25 and then denies all other outbound DNS traffic.
shady23 👍 1 Selected: D
D. Phishing
Jonserver 👍 2
Phishing

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The scenario involves receiving an unsolicited email containing a malicious link designed to harvest login credentials. This fits the standard definition of Phishing (Option D): a social engineering attack where attackers send fraudulent communications, typically emails, to induce victims to reveal sensitive information. The "page not found" error indicates the credential submission site may have been misconfigured or temporary, but the intent and method were clearly phishing.

Why the Other Options Are Wrong

Brand Impersonation (Option A) is a specific technique often used within phishing attacks to lend credibility. While the attacker did impersonate a payment website, the question asks for the "type of social engineering attack," and Phishing is the more comprehensive and standard classification for this email-based credential theft. Pretexting (Option B) involves creating a fabricated scenario (a pretext) to engage the victim in conversation to extract info; here, there was no dialogue or elaborate story, just a direct lure. Typosquatting (Option C) refers to registering domain names similar to legitimate ones (e.g., paypa1.com instead of paypal.com); while the link might have used such a domain, the attack vector itself is the email campaign, making Phishing the primary classification.

Community Comment Notes

The community overwhelmingly voted for D, recognizing the classic "email with link" pattern. One commenter noted, "if a Technique was asked then Brand impersonation would be the best answer... the best answer is phishing because phishing is a type of attack that involves fraudulent practice of sending email." Another user correctly identified that while brand impersonation occurred, it is a subset of the broader phishing attack described.

Exam Strategy

When asked for the "type of attack," look for the broad category first (e.g., Phishing, Malware, Social Engineering). If the options include both a specific tactic (like Brand Impersonation) and the general category (Phishing), choose the general category unless the question specifically asks for the "technique" or "method" used to gain trust.

Frequently Asked Questions

Why isn't Brand Impersonation the correct answer?

Brand Impersonation is a technique used within the attack. The question asks for the 'type of attack,' and Phishing is the broader, standard classification for email-based credential harvesting.

Does the 'page not found' error change the attack type?

No. The error likely means the malicious site failed to load properly after submission, but the initial lure and intent (stealing credentials via email) remain Phishing.

More SY0-701 FAQ →

Related Analysis

A systems administrator uses a key to encrypt a message bein

S-Grade

Which of the following would be the most appropriate way to

A-Grade

An administrator finds that all user workstations and server

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide