In an effort to test the effectiveness of an organization’s security awareness training, a penetrator tester crafted an email and sent it to all of the employees to see
how many of them clicked on the enclosed links. Which of the following is being tested?

A.
How many employees are susceptible to a SPAM attack

B.
How many employees are susceptible to a cross-site scripting attack

C.
How many employees are susceptible to a phishing attack

D.
How many employees are susceptible to a vishing attack