CompTIA Security+ (SY0-601) — Question 343

An attacker is targeting a company. The attacker notices that the company's employees frequently access a particular website. The attacker decides to infect the website with malware and hopes the employees' devices will also become infected. Which of the follow ng techniques is the attacker using?

Answer options

• A. Watering-hole attack
• B. Pretexting
• C. Typosquatting
• D. Impersonation

Correct answer: A

Explanation

The correct answer is A, Watering-hole attack, because this technique involves compromising a commonly visited website to infect users who access it. The other options, such as Pretexting, Typosquatting, and Impersonation, do not involve infecting a website to target users but rather focus on deception and identity manipulation.