PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ101

Attacks and Exploits

While assessing a company, a penetration tester sends the following email to the company’s Chief Financial Officer (CFO):

> Dear CFO,

>

> As we discussed during a recent meeting, please open the following attachment containing the invoice for an existing vendor. If you do not pay this now, we will suspend the licenses for your billing system in three days.

>

> GoPay CMS Systems Services -

Which of the following techniques does this attack exemplify?

  • A Whaling
  • B Phishing
  • C Spear phishing
  • D Vishing
Explanation

Whaling is a targeted phishing attack aimed at high-ranking organizational members. Addressing the CFO with a tailored vendor-invoice pretext and an urgent threat is designed to exploit an executive’s authority and access. CISA distinguishes whaling from general spear phishing by its focus on high-profile or high-ranking targets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!