Identifying Impersonation vs Whaling in Social Engineering

SY0-701 By islever Editorial Last updated

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

Short answer

C The attacker is impersonating the CEO to socially engineer the employee into buying gift cards.

Question

An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?
  1. Smishing
  2. Disinformation
  3. Impersonating Correct Answer
  4. Whaling

Key Takeaways

The test assesses the ability to differentiate between the method (impersonating) and the target class (whaling), with the common trap being the selection of whaling simply because a CEO is mentioned.

This question distinguishes between impersonating a high-profile executive and the specific attack vector of whaling based on the target's identity. It establishes that impersonation is the technique used when an attacker pretends to be another person, regardless of their rank.

Common mistake: Many learners select 'Whaling' (D) because they associate the term exclusively with CEOs and executives, overlooking that whaling specifically refers to attacks *targeting* high-profile individuals, whereas this scenario involves an employee being tricked by an imposter.

Expert Analysis

Why the Answer Is Correct

The attacker is using Impersonating (C). Impersonation is a social engineering technique where an attacker assumes the identity of another person or entity to gain trust and manipulate victims. In this scenario, the attacker poses as the CEO to deceive an employee into purchasing gift cards. The core action is assuming a false identity.

Why the Other Options Are Wrong

Whaling (D) is a specific type of phishing that targets high-profile individuals like CEOs or CFOs. Here, the victim is a regular employee, not the executive; the executive is merely the persona being adopted. Therefore, whaling does not describe the attack against the employee. Smishing (A) involves SMS messages, which are not mentioned. Disinformation (B) refers to spreading false information broadly, not a targeted deceptive interaction based on assumed identity.

Community Comment Notes

The community was divided, with many voters choosing C but some arguing for D. As BugG5 noted, "Impersonating involves pretending to be someone else... to deceive the employee." While Migzz argued for whaling because it involves a CEO, the exam logic prioritizes the mechanism (impersonation) over the persona's title when the target is not the executive themselves. Several users like Glacier88 correctly identified that since the target is an employee, impersonation is the most accurate technical description of the tactic used against them.

Exam Strategy

Always analyze who the direct victim is in a social engineering scenario. If the victim is an executive, think Phishing/Whaling. If the victim is anyone else but the attacker claims to be an executive, think Impersonation/BEC.

Frequently Asked Questions

Why is this not Whaling if the CEO is involved?

Whaling targets high-profile individuals. Since the victim here is an employee, not the executive, it is impersonation, not whaling.

What is the difference between Impersonating and Disinformation?

Impersonating involves actively pretending to be a specific person to manipulate a victim. Disinformation is the general spread of false information without necessarily assuming a specific identity.

More SY0-701 FAQ →

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 8 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 8

  1. BugG5 👍 12 Answered C
    Impersonating involves pretending to be someone else, in this case, the Chief Executive Officer (CEO), to deceive the employee into taking a specific action (buying gift cards). The attacker is leveraging the authority and trust associated with the CEO's position to manipulate the employee. Whaling: This phishing attack targets high-profile individuals, such as executives. An attacker is 'posing' and not 'targeting' a CEO. Therefore its C
  2. Migzz 👍 3
    Answer is D whaling. Only because it involves a high-profile executive. If you look up the definition of whaling and compare it to C., whaling is a more suitable answer from a security plus exam standpoint.
  3. Glacier88 👍 2 Answered C
    Smishing: Phishing via SMS messages. Disinformation: Spreading false information. Impersonating: Pretending to be someone else. Whaling: Targeting high-profile individuals. Given that the attacker is posing as the CEO, impersonating is the most accurate answer.
  4. ExamTopics2040 👍 2
    Whaling targets high-profile individuals within an organization, such as executives, CEOs, CFOs, or other senior management. so C is best answer
  5. Emmyrajj 👍 1 Answered D
    The correct answer is: D. Whaling Explanation: Whaling is a type of social engineering attack that specifically targets high-profile individuals such as executives, or in this case, impersonates them to deceive others. The attacker is posing as the CEO to manipulate an employee into performing an action, such as buying gift cards. This is a targeted attack that leverages the authority and influence of a senior executive.
Show 3 more comments
  1. jafyyy 👍 1
    C. Impersonating - Given the target is an employee rather than a high-profile executive, most accurate technique used is Impersonating.
  2. Hayder81 👍 1
    Impersonating C
  3. Nilab 👍 1 Answered C
    Impersonation

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide