What is the main goal of a phishing attack?

• A. To steal software licenses.
• B. To degrade network performance.
• C. To disclose sensitive internal policies.
• D. To trick individuals into providing sensitive information or access.

Answer: (D)

Phishing is a social-engineering tactic where the attacker pretends to be a trusted entity to coax a user into revealing sensitive information or granting access. The goal is to obtain credentials, payment details, or other secrets that can be used to break into accounts or systems, or to install malware. Fake emails, texts, or websites that mimic legitimate sources are used, often with urgency to prompt quick action. This focus on tricking people into providing information or access is what makes it the correct objective. Degrading network performance, exposing internal policies, or stealing licenses aren’t the primary aims of phishing.