What is a fundamental principle behind using AI for phishing detection?

• A. Training on patterns of acceptable and suspicious emails to block or quarantine threats
• B. Relying only on user reports
• C. Blocking all emails by default
• D. Ignoring phishing threats

Answer: (A)

The fundamental idea is to train AI on labeled examples of legitimate and phishing emails so the model learns patterns that distinguish them. By analyzing features from email content, headers, URLs, sender information, and attachments, the AI builds a classifier that assigns a risk score or a phishing verdict. This enables automatic actions like blocking or quarantining suspicious messages while allowing genuine mail to pass, and it can adapt as attackers change tactics through ongoing retraining or feedback. Relying only on user reports misses many threats and slows response, blocking all emails by default is too aggressive and causes many false positives, and ignoring phishing threats defeats the purpose of protection.