Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which type of attack can be classified as a mobile-based security incident?

  1. Phishing

  2. SMiShing

  3. Spyware

  4. Ransomware

The correct answer is: SMiShing

The correct answer, which identifies SMiShing as a mobile-based security incident, underscores the unique characteristics of this type of attack. SMiShing, a combination of 'SMS' and 'Phishing,' specifically targets mobile device users through text messages. It involves tricking individuals into revealing sensitive information or clicking on malicious links by appearing as a legitimate communication. This method leverages the nature of mobile communication, making it distinctly a mobile-based security threat. In contrast, while phishing commonly refers to similar tactics conducted through email or other non-mobile platforms, it isn't confined to mobile devices. Spyware and ransomware, while they can affect mobile devices, are not inherently classified as mobile-specific attacks, as they can also be deployed on traditional computing systems. Hence, SMiShing is the most precise example of a mobile-based security incident in this context.