Which of the following is NOT listed as a type of computer security incident?

• A. Data breach
• B. Insider threat
• C. Malicious code attacks
• D. Phishing

Answer: (D)

The key idea is distinguishing events that are classified as security incidents from the methods attackers use. Data breach describes a transfer or exposure of data to unauthorized parties, which is a standard incident type. An insider threat involves harm caused by someone with legitimate access, also a recognized incident type. Malicious code attacks cover events driven by malware like viruses, worms, or ransomware, and are a common incident category.

Phishing is a social engineering technique used to trick people into giving up credentials or clicking on malicious links. It’s a method that enables incidents, but on many classification schemes it isn’t listed as a standalone incident type. It serves as a way attackers carry out incidents rather than being counted as an incident type in itself. So phishing is not listed as a type of computer security incident, while the other options are.