A systems administrator is concerned users are accessing emails through a duplicate site that is not run by the company. Which of the following is used in this scenario?

Impersonation is the correct answer because it directly describes the act of one entity pretending to be another. In this scenario, a duplicate site is impersonating the legitimate company email site to trick users. While phishing is a broader attack category that often involves impersonation (e.g., sending fraudulent emails to trick users into revealing credentials), the specific act of creating a fake site to mimic a legitimate one falls under impersonation. Replication refers to creating exact copies of data or systems for redundancy or performance, which is not the attack itself. Smishing is a type of phishing that occurs via SMS (text messages), which is not indicated here.