EC-Council
ECSS · Question #170
Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is…
The correct answer is B. Replay. See the full explanation below for the reasoning.
Question
Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?
Options
- AFirewalking
- BReplay
- CSession fixation
- DCross site scripting
How the community answered
(29 responses)- A3% (1)
- B79% (23)
- C10% (3)
- D7% (2)
Community Discussion
No community discussion yet for this question.