Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I hate it but answer is D. It is also C bc Executive Whaling is a type of Social Engineering, but D is most precise. Additional reasoning from Grok: The scenario describes a suspicious call claiming the Chief Financial Officer (CFO) requested credit card information to close an invoice. This is a targeted attack leveraging the authority of a high-profile executive, which aligns with whaling, a specific type of social engineering aimed at executives or high-value targets. While C. Social engineering is a broader category that includes whaling, the more precise answer is D. Executive whaling due to the specific targeting of a senior executive like the CFO. A. Insider threat is incorrect, as the scenario involves an external caller, not an internal employee misusing access. B. Email phishing is incorrect, as the attack was via a phone call, not email. C. Social engineering is partially correct but less specific than whaling, which directly fits the scenario.
The answer is C - We have to read the question carefully. At the end of the question, it says, "Which of the following TOPICS". The only one that truly qualifies as a "TOPIC" is social engineering. All the others are examples of social engineering.
C: SOCIAL ENGINEERING. The two parties are the IT individual and the CALLER threatening AS IF they were the CFO. Whaling involves ACTULLY targeting the CFO. "IT" is the target.