In an effort to test the effectiveness of an organization’s security awareness training, a penetrator tester crafted
an email and sent it to all of the employees to see how many of them clicked on the enclosed links. Which of
the following is being tested?

A.
How many employees are susceptible to a SPAM attack

B.
How many employees are susceptible to a cross-site scripting attack

C.
How many employees are susceptible to a phishing attack

D.
How many employees are susceptible to a vishing attack