CompTIA Security+ (SY0-501) — Question 869

Which of the following involves the use of targeted and highly crafted custom attacks against a population of users who may have access to a particular service or program?

Answer options

• A. Hoaxing
• B. Spear phishing
• C. Vishing
• D. Phishing

Correct answer: B

Explanation

The correct answer is B, Spear phishing, as it refers to targeted attacks aimed at specific individuals or organizations, often using personal information to appear legitimate. Hoaxing (A) is generally about spreading false information, Vishing (C) involves voice phishing typically over the phone, and Phishing (D) is a broader term for fraudulent attempts to obtain sensitive information but does not specifically target individuals like spear phishing does.