Exam 220-1002 topic 1 question 275 discussion

It is definitely D

Per Professor Dion's tests the correct answer is D phishing

C. Spoofing "Spoofing is the process of masquerading as another user or device. It is usually done for the purpose of accessing a resource to which the hacker should not have access or to get through a security device such as a firewall that may be filtering traffic based on a source IP address." D. Phishing Social engineering is a process in which an attacker attempts to acquire information about your network and system by social means, such as by talking to people in the organization. A social engineering attack may occur over the phone, by email, or by a visit. The intent is to acquire access information, such as user IDs and passwords. When the attempt is made through email or instant messaging, it is known as phishing and often is made to look as if it is coming from sites where users are likely to have accounts.

Both C and D are right according to FBI: https://www.fbi.gov/scams-and-safety/common-scams-and-crimes/spoofing-and-phishing

0-day uses PC vulnerabilities the rest can exploit "HUMAN VULNERABILITIES" but Phishing is takes it to next level by using "PERSONAL" information to the mix Man-in-the-middles = "PC VULNER" SPOOFING = is more on a method of delivery, Downloading malware PHISHING = Method of retrieval, asks for your credentials this is why PHISHING is the answer

?????????????