During a penetration testing exercise, a team decides to use a watering hole strategy.

Watering Hole Attack Explanation:

A watering hole attack involves compromising a website that the target frequently visits.

The attacker injects malicious code into the site, which then exploits users who access it.

Why Not Other Options?

B: DDoS attacks disrupt services but do not align with the watering hole strategy.

C: Social engineering may be effective but is not a watering hole attack.

D: Phishing is unrelated to compromising trusted websites.

CompTIA Pentest+ References:

Domain 3.0 (Attacks and Exploits)