Many employees are receiving email messages similar to the one shown below: From IT department To employee Subject email quota exceeded Pease click on the following link http:www.website.info/email.php?quota=1Gb and provide your username and password to increase your email quota. Upon reviewing other similar emails, the security administrator realized that all the phishing URLs have the following common elements; they all use HTTP, they all come from .info domains, and they all contain the same URI. Which of the following should the security administrator configure on the corporate content filter to prevent users from accessing the phishing URL, while at the same time minimizing false positives?

Question

Quizplus · Accepted Answer

Blocking the specific pattern "http://*.info/email.php?quota=1Gb" will prevent access to the phishing URLs while minimizing false positives, as it targets the exact structure used in the phishing attempts.

Many Employees Are Receiving Email Messages Similar to the One