A proxy server acts as a gateway between you and therefore the internet. It's an intermediary server separating end users from the websites they browse. Proxy servers provide varying levels of functionality, security, and privacy counting on your use case, needs, or company policy.
If you're employing a proxy server, internet traffic flows through the proxy server on its thanks to the address you requested. A proxy server is essentially a computer on the web with its own IP address that your computer knows. once you send an internet request, your request goes to the proxy server first. The proxy server then makes your web request on your behalf, collects the response from the online server, and forwards you the online page data so you'll see the page in your browser.

Insecure data transmission allows an attacker to intercept sensitive information while it is in transit. A man-in-the-middle attack enables the tester to capture unencrypted or improperly protected network traffic between the mobile app and its backend services.

Whaling is the correct answer because the scenario describes a highly targeted phishing attempt aimed at a
"big fish"-a senior executive (the CEO). In CEH terminology, whaling is a specialized form of phishing that focuses on high-profile, high-authority individuals (e.g., CEOs, CFOs, directors) to maximize impact. These targets often have access to sensitive data, financial approvals, privileged systems, and strategic communications, making their credentials significantly more valuable than those of typical employees.
The attacker (Clara) uses classic social engineering drivers emphasized in CEH training: authority (impersonating the legal department), urgency/fear (a "pending lawsuit"), and trust in internal processes (a link to a supposed internal portal). This combination is designed to short-circuit normal verification behavior and prompt quick compliance. The inclusion of a credential-harvesting link aligns with common phishing goals: capturing usernames/passwords, enabling account takeover, and potentially facilitating broader compromise (e.g., email access for business email compromise, lateral movement, or privileged escalation).
Why the other options are less accurate: Spear phishing is also targeted, but it is a broader category aimed at specific individuals or groups at any level. The defining clue here is the executive-level target, which elevates it to whaling. Clone phishing involves copying a legitimate email previously received and swapping a malicious link or attachment-this detail is not present. Consent phishing typically abuses legitimate OAuth
/app consent flows rather than a fake portal requesting credentials.

The issue is that devices executed tampered code without verifying its integrity at startup. Secure boot ensures that only trusted, cryptographically verified code is executed during the boot process, preventing unauthorized or modified firmware from running.

Comprehensive and Detailed Explanation:
A covert channel is any communication path that allows data to be transferred in violation of a system's security policy. It's commonly used by malware or Trojans to exfiltrate data or send commands undetected.
Examples include:
Encoding data in TCP headers (unused bits)
Timing of packets (timing channel)
Use of legitimate protocols to piggyback malicious traffic
From CEH v13 Courseware:
Module 6: Malware Threats # Trojans and Covert Channels
Reference:CEH v13 Study Guide - Module 6: Trojan Communication # Covert and Overt ChannelsNIST SP
800-53 - Covert Channel Analysis