A familiar logo does not establish that a message is trustworthy. NIST identifies urgency, requests for sensitive information and suspicious addresses or links as phishing warning signs. In a practice scenario, first describe what the sender wants you to do. Then identify the evidence that supports your decision. A convincing story is not the same as a verified request.
Try this: a message demands an immediate password reset through an unfamiliar link. Write a safe next action without opening that link, then explain why the proposed action reduces the risk. Compare a second scenario with different wording. This is security-fundamentals practice; it does not represent complete Security+ objective coverage or an official exam question.