Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

What type of phishing attack is aimed specifically at senior executives and high-profile individuals?

1. Whaling

2. Watering hole

3. Pharming

4. Spear phishing

The correct answer is: Whaling

Whaling is specifically designed to target high-profile individuals such as senior executives, which is why it is the correct choice. This type of phishing attack seeks to impersonate trusted entities or create scenarios that are particularly believable to the intended targets, often leveraging their influence and access to sensitive information. In these attacks, attackers may craft emails or other communications that appear very legitimate, often using personal information to increase trust and lure the executive into divulging confidential information or taking harmful actions. The stakes are often higher with whaling, as the potential reward for the attacker can be significant due to the access that these high-level targets have within their organizations. Other types of phishing, such as spear phishing, can target individuals as well but are not restricted to high-profile figures. Watering hole attacks refer to compromising a website that is frequently visited by the target group, and pharming involves redirecting users from legitimate websites to fraudulent ones without their knowledge. These approaches differ fundamentally in their tactics and scope compared to whaling.