Question 107

Explanation

Correct Answer:

B is correct. Pretexting is a form of social engineering, typically practiced in person or over the phone, in which the attacker invents a believable scenario in an effort to persuade the target to violate a security policy. 

Incorrect Answers:

A is incorrect. Vishing is a type of phishing that is performed specifically over Voice over IP (VoIP). It may not necessarily use a phone conversation to interact with the user; it could also be used as part of a broader attack to impersonate telephone numbers and automate attacks using mass telemarketing calls or callback numbers. 

C is incorrect. Spear-phishing is a type of phishing attack that targets specific individuals or roles, such as IT or security personnel. 

D is incorrect. Whaling is a phishing attack that specifically targets senior executives.