nerdexam
(ISC)2

CSSLP · Question #194

Which of the following is used by attackers to record everything a person types, including usernames, passwords, and account information?

The correct answer is B. Keystroke logging. Keystroke logging is a malicious technique used by attackers to record all keyboard inputs made by a user, directly capturing sensitive information like credentials. This allows attackers to steal usernames, passwords, and other typed data.

Secure Software Concepts

Question

Which of the following is used by attackers to record everything a person types, including usernames, passwords, and account information?

Options

  • APacket sniffing
  • BKeystroke logging
  • CSpoofing
  • DWiretapping

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    89% (32)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Keystroke logging is a malicious technique used by attackers to record all keyboard inputs made by a user, directly capturing sensitive information like credentials. This allows attackers to steal usernames, passwords, and other typed data.

APacket sniffing

Packet sniffing involves intercepting and analyzing network traffic but does not directly record keystrokes made on a local machine unless the keystrokes are transmitted unencrypted over the network.

BKeystroke loggingCorrect

Keystroke logging, also known as keylogging, is specifically designed to record every keystroke a user makes, which directly captures usernames, passwords, and other sensitive information typed into a system.

CSpoofing

Spoofing involves masquerading as another entity to gain unauthorized access or mislead systems, but it is not a method for recording user keystrokes.

DWiretapping

Wiretapping involves monitoring telephone or internet communications, which is different from recording inputs made directly on a computer via the keyboard.

Concept tested: Keystroke logging and its purpose

Source: https://www.cisa.gov/news-events/news/cisa-provides-guidance-malware-and-keylogging

Topics

#Keystroke logging#Attack methods#Input security#Data exfiltration

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice