💡 A spear phishing attack is a highly targeted phishing attempt in which the attacker impersonates a trusted individual (in this case, the CEO) to manipulate specific employees (payroll staff) into revealing confidential information (employee tax data). C. Brute force attack: A brute force attack involves systematically guessing passwords or encryption keys to gain unauthorized access. It does not involve social engineering or impersonation.