Exam PT0-001 topic 1 question 74 discussion

C. Spear phishing attack Sending mail targeting CEO

Definitely C, would go for whaling should it be a choice.

looks good to me

C. Spear phishing. They are going after a specific person. Specific target = spear and email= phishing.

It was on the exam

Sybex practice chapter 3 question189 C. The Social Engineer Toolkit (SET) provides a framework for automating the social engineering process, including sending spear phishing messages, hosting fake websites, and collecting credentials. Social engineering plays an important role in many attacks. SET is a menu-driven social engineering attack system. In this scenario, the penetration tester is attempting a spear phishing attack.

Its C. It doesnt fit the profile of an Elicitaton attack. " elicitation is the strategic use of casual conversation to extract information from people (targets) without giving them the feeling that they are being interrogated or pressed for the information. Elicitation attacks can be simple or involve complex cover stories, planning, and even co-conspirators." Source: https://www.redteamsecure.com/blog/5-effective-social-engineering-elicitation-techniques

Definitely C

im leaning towards B

Spear phishing: This is a phishing attack, irrespective of medium, that is crafted to target a specific person or group of people. Straight out of the Comptia Pentest+ book

https://www.redteamsecure.com/blog/5-effective-social-engineering-elicitation-techniques (Quote)That is to say, elicitation is the strategic use of casual conversation to extract information from people (targets) without giving them the feeling that they are being interrogated or pressed for the information. -- there is no physical contact in this question and making use of email medium. C is answer

I like B. Going after the CEO is a Whaling attack. Setting up a duplicate website is an impersonation attack. Usually, impersonation refers to targeting people in a social engineering attack, but it can also refer to systems - see Website Impersonation. https://bewica.com/blog/website-impersonation-best-practice