nerdexam
(ISC)2

CSSLP · Question #177

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

The correct answer is C. Man-in-the-middle attack. A man-in-the-middle (MITM) attack involves an attacker secretly relaying and possibly altering communication between two parties who believe they are communicating directly.

Secure Software Concepts

Question

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

Options

  • ADenial-of-service attack
  • BDictionary attack
  • CMan-in-the-middle attack
  • DPassword guessing attack

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    93% (37)

Why each option

A man-in-the-middle (MITM) attack involves an attacker secretly relaying and possibly altering communication between two parties who believe they are communicating directly.

ADenial-of-service attack

A Denial-of-Service (DoS) attack aims to make a service unavailable to legitimate users, not to intercept and alter communication between two parties.

BDictionary attack

A dictionary attack is a method of trying to discover passwords by systematically entering words from a list of common passwords, not by intercepting communications.

CMan-in-the-middle attackCorrect

A Man-in-the-Middle (MITM) attack is precisely characterized by an attacker interjecting themselves into an ongoing communication between two hosts, allowing them to intercept, read, and potentially modify messages before forwarding them. This makes both parties believe they are directly communicating with each other, unaware of the intermediary.

DPassword guessing attack

A password guessing attack is a broad term for attempts to determine a password, which can include dictionary attacks but does not describe the insertion of an intermediary between communicating hosts.

Concept tested: Man-in-the-Middle attack definition

Source: https://www.cisco.com/c/en/us/products/security/what-is-man-in-the-middle-attack.html

Topics

#Man-in-the-middle attack#Network attacks#Attack types#Communication security

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice