Ethical Hacking Essentials Practice Test

What best describes the threat source in Sam's scenario involving a phishing email?

1. Internal threat

2. Unintentional threat

3. External threat

4. Natural threat

The correct answer is: Unintentional threat

In the context of Sam's scenario involving a phishing email, the best description of the threat source is an external threat. Phishing emails are typically sent from outside an organization's network, often attempting to deceive the recipient into providing sensitive information or downloading malicious software. This makes them a clear example of an external threat since they originate from external attackers who do not have permissions or legitimate access to the organization's systems. In contrast, an internal threat would come from within the organization, such as a disgruntled employee or a compromised account. An unintentional threat would imply that the risk is posed by someone acting accidentally, rather than maliciously, which doesn’t align with the nature of a phishing attack that is intentionally designed to deceive. Lastly, a natural threat refers to environmental disasters or natural events, which does not apply to the context of a phishing email. Recognizing that phishing is a deliberate manipulation method employed by external actors to target organizations helps clarify why this is categorized as an external threat.