SY0-701 Question 6

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  The best answer is: ✅ A. Why? A Business Email Compromise (BEC) attack typically involves: An attacker impersonating an executive, vendor, or trusted business contact. Using social engineering rather than malware. Requesting money transfers, gift cards, payroll changes, or sensitive information. A classic example is: An email that appears to come from the CEO asking an employee to buy gift cards and send the codes. This matches Option A. Why the others are incorrect B. Employees who open an email attachment receive messages demanding payment in order to access files. This describes ransomware. C. A service desk employee receives an email from the HR director asking for log-in credentials to a cloud administrator account. This is primarily a phishing/social engineering credential theft attempt. D. An employee receives an email with a link to a phishing site that is designed to look like the company’s email portal. This is a phishing attack.

• Chose A1

  his scenario describes a classic form of Business Email Compromise (BEC) known as Executive Impersonation (or CEO fraud). In these social engineering attacks, cybercriminals modify the email's display name to look like a trusted authority figure (such as a CEO, VP, or director) and use urgency to manipulate employees into buying gift cards or conducting unauthorized financial transactions.

• Chose C2

  The HR director should know his login credentials. Why telling the service help desk to send credentials. This suggests BEC as an attacker may be the one sending the email. Google also agrees with this view.