CSSLP · Question #194
Which of the following is used by attackers to record everything a person types, including usernames, passwords, and account information?
The correct answer is B. Keystroke logging. Keystroke logging is a malicious technique used by attackers to record all keyboard inputs made by a user, directly capturing sensitive information like credentials. This allows attackers to steal usernames, passwords, and other typed data.
Question
Which of the following is used by attackers to record everything a person types, including usernames, passwords, and account information?
Options
- APacket sniffing
- BKeystroke logging
- CSpoofing
- DWiretapping
How the community answered
(36 responses)- A3% (1)
- B89% (32)
- C6% (2)
- D3% (1)
Why each option
Keystroke logging is a malicious technique used by attackers to record all keyboard inputs made by a user, directly capturing sensitive information like credentials. This allows attackers to steal usernames, passwords, and other typed data.
Packet sniffing involves intercepting and analyzing network traffic but does not directly record keystrokes made on a local machine unless the keystrokes are transmitted unencrypted over the network.
Keystroke logging, also known as keylogging, is specifically designed to record every keystroke a user makes, which directly captures usernames, passwords, and other sensitive information typed into a system.
Spoofing involves masquerading as another entity to gain unauthorized access or mislead systems, but it is not a method for recording user keystrokes.
Wiretapping involves monitoring telephone or internet communications, which is different from recording inputs made directly on a computer via the keyboard.
Concept tested: Keystroke logging and its purpose
Source: https://www.cisa.gov/news-events/news/cisa-provides-guidance-malware-and-keylogging
Topics
Community Discussion
No community discussion yet for this question.