Whaling is a type of social engineering attack specifically targeting high-profile individuals such as CEOs or other executives. It is a form of spear phishing that focuses on these high-value targets with highly personalized and convincing messages.

A jump server acts as a controlled access point that can be restricted to specific internal IP addresses, ensuring that only approved internal sources can connect to the mission-critical database.

Branch protection requirements are related to the version control and development process within the SDLC, ensuring that code changes are reviewed, tested, and approved before being merged into main branches. This helps maintain code quality and security throughout the development process.
Penetration testing is usually conducted as part of the testing phase or after deployment to identify vulnerabilities and security weaknesses. It is a separate process from the core stages of the SDLC but is an important aspect of ensuring the security and robustness of the application once development is completed.

Immutability ensures backups cannot be altered or encrypted after creation, preventing ransomware from infecting them and preserving clean recovery points.

The stranger is manipulating a casual conversation to elicit sensitive details (employer, division, personal info). This intentional information-gathering through interpersonal interaction is classic social engineering - exploiting human trust rather than technical flaws.