Answer it
P1 a2 phishing layers
5 marksYou mark it yourself against the marking points
A member of a school's office staff receives an email that looks as if it comes from the school's IT team. It links to a fake login page, and they type their password there. The next day, an attacker logs in to the staff member's account from another country and reads student records.
(a) Identify the type of attack that was used. [1]
(b) Suggest three countermeasures of different kinds (for example technical, procedural and detection) that together would protect the school against this kind of attack. Justify each one, and justify using more than one. [4]
[5]