AI in Phishing Detection Quiz

Answers and explanations appear as you take the quiz.

1. Which message-body signal is a common phishing warning sign in CISA guidance?
   • A request to act urgently or provide sensitive information
   • A routine internal meeting reminder
   • A message with a valid calendar attachment from a known colleague
   • A plain newsletter with no requested action
2. What does SPF, DKIM, and DMARC checking primarily help detect?
   • Grammar mistakes
   • Sender domain spoofing
   • Image resolution
   • Email length
3. Why can visual-similarity analysis catch phishing pages that URL blocklists miss?
   • It reads the page's source comments
   • It counts the number of links
   • It matches the page's logo and layout to a real brand even on a brand-new domain
   • It checks the server's country
4. Why do CISA’s counter-phishing recommendations call for ongoing adaptation?
   • Because one filter guarantees that every future attack is caught
   • Because every phishing email uses a cloned voice
   • Because domains never change after registration
   • Phishing tactics and indicators can change over time
5. What email control does CISA recommend to help intercept phishing messages?
   • A secure email gateway
   • A music recommendation engine
   • A video transcoder
   • A public social-media feed
6. What kind of campaign did the FBI warn targeted senior U.S. officials in 2025?
   • A certified clinical trial recruitment campaign
   • An impersonation campaign using malicious messaging
   • A routine software update from federal agencies
   • An authorized penetration test of public websites
7. What is the purpose of sandboxing a suspicious email attachment?
   • Translate the attachment into another language
   • Add its sender to the address book
   • Open it in an isolated environment to observe behavior before it can affect a user’s system
   • Increase the attachment’s file size
8. Which request is a typical business-email-compromise warning sign in the guide?
   • A calendar invite from a known colleague with no request
   • A newsletter that includes a company logo
   • A system notice that reports a completed software update
   • An email impersonating an executive and requesting a wire transfer