In an effort to test the effectiveness of an organization’s security awareness training, a penetrator tester
crafted an email and sent it to all of the employees to see how many of them clicked on the enclosed
links. Which of the following is being tested?

A.
How many employees are susceptible to a SPAM attack

B.
How many employees are susceptible to a cross-site scripting attack

C.
How many employees are susceptible to a phishing attack

D.
How many employees are susceptible to a vishing attack