GIAC Certified Incident Handler (GCIH) — Question 44

What is a common characteristic of both a watering hole attack and a drive-by attack?

Answer options

• A. Targets a browser or files associated with the browser
• B. Targets a specific vertical industry or organization
• C. The attacker uses customized exploits, not off-the-shelf exploits
• D. The attack is based on server-side request forgery, not cross site request forgery

Correct answer: A

Explanation

Option A is correct because both watering hole and drive-by attacks focus on compromising web browsers or files linked to them. Options B, C, and D describe characteristics that do not apply to both attack types, as they are not universally true for both watering hole and drive-by attacks.