CompTIA PenTest+ (PT0-001) — Question 191

Which of the following is an example of a spear phishing attack?

Answer options

• A. Targeting an executive with an SMS attack
• B. Targeting a specific team with an email attack
• C. Targeting random users with a USB key drop
• D. Targeting an organization with a watering hole attack

Correct answer: B

Explanation

The correct answer is B, as spear phishing specifically involves targeting a particular group or individual with tailored attacks, such as email. Options A, C, and D describe other forms of attacks that do not fit the definition of spear phishing, which focuses on personalized targeting.