Exam SY0-601 topic 1 question 659 discussion

A watering-hole attack involves compromising a website or online resource that a particular group of people frequently visit. In this case, the public Internet forum that the engineers use would be the "watering hole."

23 APR 2024 I took my exam and i passed with 776, this question was on my exam this website was very helpful, study it and understood the answer. GL.

A. Watering-hole attack. A watering-hole attack involves compromising a website that the target group frequently visits and trusts, such as the public Internet forum in this scenario. By infecting the forum with malware or malicious scripts, the attacker can exploit vulnerabilities in the visitors' browsers or plugins to gain unauthorized access to their systems or steal sensitive information. In this context, targeting the public Internet forum frequented by company engineers provides the attacker with an opportunity to infect the engineers' systems when they visit the compromised website, potentially leading to the compromise of sensitive company information or the engineers' credentials. Therefore, a watering-hole attack is the tactic an attacker would most likely use in this scenario.

A watering hole attack is a form of cyberattack that targets groups of users by infecting websites that they commonly visit.

The attackers would attack the forum… aka watering hole attack… no one is sharing credentials on a public forum or else you should be fired immediately

watering hole attack

Although watering hole is attack is possible, I think the most prevalent attack that can be seen on a public forum would be credential harvesting...

B. Credential Harvesting Credential harvesting is a technique used by attackers to obtain sensitive information such as usernames and passwords from unsuspecting users. In this case, the attacker may target the engineers participating in the forum to gain access to their login credentials for various purposes, including unauthorized access to company systems or personal accounts. By tricking the engineers into revealing their credentials, attackers can potentially gain unauthorized access to sensitive information, compromise systems, or carry out further malicious activities. This tactic is particularly effective in scenarios where users may reuse passwords across multiple platforms or have weak password practices.