ITGSS Certified Technology Specialist

Which of these acts is typically considered a cyber attack?

1. Spear phishing

2. Software updates

3. Firewall installations

4. Data backups

The correct answer is: Spear phishing

Spear phishing is considered a cyber attack because it involves a targeted attempt to steal sensitive information such as account credentials or financial information from a specific individual or organization. This technique usually involves deceptive emails that appear to come from a trusted source, tricking the recipient into providing confidential information or clicking malicious links. The targeted nature of spear phishing, combined with its intent to exploit vulnerabilities in human behavior and technology, distinctly categorizes it as a cyber attack. In contrast, activities such as software updates, firewall installations, and data backups are preventive measures or responses aimed at enhancing security and protecting data. These actions are fundamental practices in cybersecurity management that help guard systems against potential threats rather than deploying harmful actions.