An employee receives an email, which appears to be from the Chief Executive Officer (CEO), asking for a report of security credentials for all users. Which of the following types of attack is MOST…

A policy violation refers to a breach of internal organizational rules or guidelines by an employee, not an external attack method attempting to extract information.

Social engineering is a broad category of attacks that manipulate people, and while spear phishing is a form of social engineering, 'spear phishing' is a more specific and accurate description of this particular attack type.

Whaling is a specific type of spear phishing that exclusively targets high-profile individuals within an organization, such as the CEO or CFO, rather than an employee being targeted by someone impersonating the CEO.

Spear phishing is a highly targeted form of phishing where attackers craft personalized messages, often impersonating a trusted sender like a CEO or high-ranking official, to deceive a specific individual or group. The goal is to manipulate the recipient into divulging confidential information, such as security credentials, by leveraging perceived authority and trust.