Which of the following is an example of a passive attack?

Question

Options

• ADenial of Service
• BData modification
• CEavesdropping
• DSession hijacking

• A
  8% (5)
• B
  2% (1)
• C
  86% (55)
• D
  5% (3)

Explanation

Eavesdropping (C) is a passive attack because the attacker only observes and collects data in transit without altering it or disrupting any service - the victim typically has no indication anything occurred.

Why the others are wrong:

• A (DoS): Actively disrupts availability by flooding or crashing a target - this changes the system's state.
• B (Data modification): Actively alters data in transit (a form of integrity attack), making it the textbook definition of an active attack.
• D (Session hijacking): Actively takes over an authenticated session, injecting or redirecting traffic - clearly an active intervention.

Memory tip: Think "passive = passive listener." A passive attacker is like someone silently reading your mail - they don't tamper with it. If the attack changes, blocks, or controls anything, it's active. If it only watches or records, it's passive.

No community discussion yet for this question.