CompTIA CASP+ (CAS-003) — Question 232

Which of the following attacks can be used to exploit a vulnerability that was created by untrained users?

Answer options

• A. A spear-phishing email with a file attachment
• B. A DoS using IoT devices
• C. An evil twin wireless access point
• D. A domain hijacking of a bank website

Correct answer: A

Explanation

A spear-phishing email with a file attachment is designed to deceive untrained users into opening harmful content, thereby exploiting their lack of knowledge. The other options, while they represent real attacks, do not specifically target vulnerabilities stemming from user inexperience in the same direct manner as spear-phishing does.