CompTIA SecurityX (CAS-005) — Question 213

A global company’s Chief Financial Officer (CFO) receives a phone call from someone claiming to be the Chief Executive Officer (CEO). The caller claims to be stranded and in desperate need of money. The CFO is suspicious, but the caller’s voice sounds similar to the CEO’s. Which of the following best describes this type of attack?

Answer options

• A. Smishing
• B. Deepfake
• C. Automated exploit generation
• D. Spear phishing

Correct answer: B

Explanation

The situation described is a classic example of a deepfake attack, where the impersonator uses voice mimicry to deceive the CFO. Smishing involves text messages, automated exploit generation refers to the automated creation of vulnerabilities, and spear phishing specifically targets individuals with tailored emails, which does not apply in this phone call scenario.