What is 'whaling' in cybersecurity? MCQ with Answer and Explanation

What is 'whaling' in cybersecurity?
A. A phishing attack targeting high-profile individuals like CEOs
B. A type of firewall
C. A type of virus
D. A physical attack
Answer: Option A
Solution (By JKSSB Mock Tests)
Whaling is a specific type of phishing attack that targets senior executives or high-profile individuals within an organization, often using sophisticated and personalized messages.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
What type of software vulnerability occurs when a program inputs more data into a memory allocation area than it can hold, overwriting adjacent memory spaces with malicious code?
A. Zero-Day Exploit
B. SQL Injection
C. Buffer Overflow
D. Cross-Site Scripting

Correct Answer: Option C


Explanation:
A buffer overflow occurs when data volume exceeds memory allocation block boundaries, allowing attackers to overwrite execution tracks and run arbitrary code.

This question belongs to: Computer Cyber Security
Question #2
What class of hacker operates without malicious intent but may cross legal boundaries to access systems without permission, later disclosing the security flaws to owners or demanding a remediation fee?
A. Script Kiddie
B. White Hat Hacker
C. Grey Hat Hacker
D. Black Hat Hacker

Correct Answer: Option C


Explanation:
Grey hat hackers inhabit an ethical middle ground; they compromise system boundaries without authorization but generally lack malicious intent, aiming instead to report or expose systemic bugs.

This question belongs to: Computer Cyber Security
Question #3
What type of attack targets a web application by injecting malicious SQL statements into input forms, allowing the attacker to manipulate the underlying backend database directly?
A. Buffer Overflow Attack
B. SQL Injection (SQLi)
C. Denial of Service (DoS)
D. Cross-Site Scripting (XSS)

Correct Answer: Option B


Explanation:
SQL injection occurs when unvalidated user input is passed directly to a database query engine, enabling threat actors to view, alter, or delete database tables illegally.

This question belongs to: Computer Cyber Security