CompTIA Security+ (SY0-701) — Question 295

Which of the following best describes a social engineering attack that uses a targeted electronic messaging campaign aimed at a Chief Executive Officer?

Answer options

• A. Whaling
• B. Spear phishing
• C. Impersonation
• D. Identity fraud

Correct answer: A

Explanation

The correct answer is A, Whaling, as it refers specifically to phishing attacks directed at high-profile individuals like CEOs. The other options, while related to social engineering, do not specifically denote targeting executives or high-ranking officials in the same manner.