What is phishing?

• A. A deceptive attempt to obtain sensitive information by posing as a legitimate entity
• B. A security protocol for authenticating users
• C. An email marketing tactic
• D. A type of malware that encrypts files

Answer: (A)

Phishing is a deceptive tactic used to steal sensitive information by pretending to be a trustworthy organization. Attackers send messages that look like they come from banks, services you use, or coworkers, aiming to trick you into revealing passwords, credit card numbers, or other private data, or into clicking links that install malware or lead to fake login pages. The method relies on social engineering—using urgency, authority, or fear to prompt quick actions without careful scrutiny. To protect yourself, verify the sender, scrutinize unexpected requests, hover over links to preview URLs, use strong passwords and multi-factor authentication, and report suspicious messages.

This description fits best because it centers on deception to obtain information by posing as a legitimate entity. The other options describe something that’s not phishing: a legitimate security protocol for authenticating users; a legitimate email marketing tactic; or malware that encrypts files, which is ransomware.