(ISC)2 Certified in Cybersecurity Practice Exam

Which of the following can be classified as a high-level cyber attack?

1. Whaling Attack

2. Phishing Attack

3. Denial-of-Service Attack

4. Ransomware Attack

The correct answer is: Whaling Attack

A whaling attack is classified as a high-level cyber attack because it specifically targets high-profile individuals within an organization, such as executives or senior leaders. The sophistication of whaling attacks often involves extensive research on the victim to make the deception more convincing. This careful planning and execution elevate them above general phishing attempts, as they are tailored to exploit the trust and authority associated with senior positions. As a result, whaling attacks pose a significant threat, often resulting in substantial financial loss or data breaches that can have widespread repercussions for the organization. In contrast, while phishing attacks are relatively common and can be harmful, they typically target a broader audience without the specific focus on high-level individuals. Denial-of-Service attacks aim to disrupt services rather than specifically target individuals or extract sensitive information, which places them in a different category of cyber attack. Ransomware attacks can also be severe, but they are generally focused on locking up data or systems for ransom rather than the targeted, personalized approach seen in whaling. Each of these attack types has its implications and methods, but the critical differentiator for a whaling attack is its highly targeted nature aimed at high-value individuals in an organization.