200-201 · Question #327
Endpoint logs indicate that a machine has obtained an unusual gateway address and unusual DNS servers via DHCP. Which type of attack is occurring?
The correct answer is C. man in the middle attack. In a man-in-the-middle attack, an attacker intercepts communication between two parties, often without their knowledge, and can alter the traffic passing between them. By providing the compromised or "unusual" gateway address and DNS servers via DHCP, the attacker can reroute…
Question
Endpoint logs indicate that a machine has obtained an unusual gateway address and unusual DNS servers via DHCP. Which type of attack is occurring?
Options
- Aevasion methods
- Bphishing
- Cman in the middle attack
- Dcommand injection
How the community answered
(15 responses)- A7% (1)
- C93% (14)
Explanation
In a man-in-the-middle attack, an attacker intercepts communication between two parties, often without their knowledge, and can alter the traffic passing between them. By providing the compromised or "unusual" gateway address and DNS servers via DHCP, the attacker can reroute the network traffic from the affected machine through their controlled gateway or DNS servers. This allows the attacker to intercept, monitor, or manipulate the communication between the victim machine and the intended network resources, potentially facilitating various forms of data interception, modification, or unauthorized access.
Topics
Community Discussion
No community discussion yet for this question.