024_Watering Hole Attacks – CompTIA Security+ SY0-701 – 2.2

Why are watering hole attacks dangerous?

• They are easy to execute

• They target specific individuals

• They bypass traditional security measures

• They require advanced technical skills

What happens after an employee visits a compromised website in a watering hole attack?

• The website infects the employee's system with malware

• The employee's data is encrypted

• The employee receives a phishing email

• The website redirects the employee to a safe site

What is a watering hole attack?

• A method where attackers compromise a third-party website frequently visited by employees.

• A technique used to water plants in dry areas.

• An attack that targets a specific individual through social media.

• A strategy to lure fish into a specific area for fishing.

What was a key challenge in assessing the impact of the 2017 attack?

• The full impact was never publicly disclosed

• The attack was too minor to assess

• There were no witnesses to the attack

• The government provided a detailed report

Why is least privilege access important for cybersecurity?

• It ensures employees only have access to necessary resources

• It allows employees to access all company data

• It prevents all cyber attacks

• It simplifies the user experience for employees

What type of malicious code was used in the 2017 attack?

• Ransomware

• Malicious JavaScript

• Keyloggers

• Trojans

How does network segmentation help defend against watering hole attacks?

• It restricts access to sensitive systems

• It increases network speed

• It allows unrestricted access to all users

• It enhances user experience

Why should organizations conduct regular security assessments on third-party websites?

• To ensure external vendors maintain strong security practices

• To reduce the cost of third-party services

• To improve the website's loading speed

• To enhance the user interface of third-party websites

How did the attackers in 2017 ensure only specific targets were infected?

• By using a phishing email to lure victims

• By inserting malicious JavaScript that targeted specific visitors

• By deploying a ransomware attack on all users

• By exploiting a zero-day vulnerability in the software

What is an essential component of Defense in Depth?

• Implementing a single firewall solution

• Combining firewalls, antivirus, and employee training

• Relying solely on antivirus software

• Using only employee training programs