A penetration tester is measuring a company’s posture on social engineering. The penetration tester
sends a phishing email claiming to be from IT asking employees to click a link to update their VPN
software immediately. Which of the following reasons would explain why this attack could be successful?

A.
Principle of Scarcity

B.
Principle of Intimidation

C.
Principle of Urgency

D.
Principle of liking