CSSLP · Question #177
Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?
The correct answer is C. Man-in-the-middle attack. A man-in-the-middle (MITM) attack involves an attacker secretly relaying and possibly altering communication between two parties who believe they are communicating directly.
Question
Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?
Options
- ADenial-of-service attack
- BDictionary attack
- CMan-in-the-middle attack
- DPassword guessing attack
How the community answered
(40 responses)- A3% (1)
- B5% (2)
- C93% (37)
Why each option
A man-in-the-middle (MITM) attack involves an attacker secretly relaying and possibly altering communication between two parties who believe they are communicating directly.
A Denial-of-Service (DoS) attack aims to make a service unavailable to legitimate users, not to intercept and alter communication between two parties.
A dictionary attack is a method of trying to discover passwords by systematically entering words from a list of common passwords, not by intercepting communications.
A Man-in-the-Middle (MITM) attack is precisely characterized by an attacker interjecting themselves into an ongoing communication between two hosts, allowing them to intercept, read, and potentially modify messages before forwarding them. This makes both parties believe they are directly communicating with each other, unaware of the intermediary.
A password guessing attack is a broad term for attempts to determine a password, which can include dictionary attacks but does not describe the insertion of an intermediary between communicating hosts.
Concept tested: Man-in-the-Middle attack definition
Source: https://www.cisco.com/c/en/us/products/security/what-is-man-in-the-middle-attack.html
Topics
Community Discussion
No community discussion yet for this question.