nerdexam
Cisco

210-250 · Question #115

Which description is an example of whaling?

The correct answer is B. when attackers go after the CEO. Whaling is a highly targeted phishing attack aimed specifically at high-profile executives such as CEOs, making it distinct from broader phishing techniques.

Threats and Vulnerabilities

Question

Which description is an example of whaling?

Options

  • Awhen attackers use fraudulent websites that look like legitimate ones
  • Bwhen attackers go after the CEO
  • Cwhen attackers target specific individuals
  • Dwhen attackers target a group of individuals

How the community answered

(33 responses)
  • B
    91% (30)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Whaling is a highly targeted phishing attack aimed specifically at high-profile executives such as CEOs, making it distinct from broader phishing techniques.

Awhen attackers use fraudulent websites that look like legitimate ones

Using fraudulent websites that mimic legitimate ones describes pharming or website spoofing, not whaling.

Bwhen attackers go after the CEOCorrect

Whaling is defined as a spear-phishing attack that specifically targets high-profile executives such as a CEO, CFO, or other senior leadership. The term originates from the idea of going after the 'big fish' within an organization. Because executives hold authority over finances and sensitive data, they are prime targets for attackers seeking large-scale financial fraud or data theft.

Cwhen attackers target specific individuals

Targeting a specific individual describes spear phishing, which is broader than whaling and does not require the target to be a senior executive.

Dwhen attackers target a group of individuals

Targeting a group of individuals describes generic phishing campaigns, not whaling, which is focused on a single high-profile executive.

Concept tested: Whaling social engineering attack targeting executives

Source: https://csrc.nist.gov/glossary/term/whaling

Topics

#whaling#phishing#social engineering#spear phishing

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice