CompTIA Security+ (SY0-701) — Question 235

An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?

Answer options

• A. Smishing
• B. Disinformation
• C. Impersonating
• D. Whaling

Correct answer: C

Explanation

The attacker is using impersonation, which involves pretending to be someone in a position of authority to manipulate the victim. Smishing refers to SMS phishing, while disinformation involves spreading false information, neither of which fits this scenario. Whaling is a specific type of phishing targeting high-profile individuals, but in this case, the term 'impersonating' more accurately describes the technique used.