FC0-U61 · Question #532
A replay attack would be the primary concern of:
The correct answer is B. authentication.. A replay attack involves capturing and retransmitting valid data transmissions to impersonate a user or repeat an action, directly targeting the authentication process. It bypasses security by reusing legitimate credentials or session tokens.
Question
A replay attack would be the primary concern of:
Options
- Aavailability.
- Bauthentication.
- Cconfidentiality.
- Dintegrity.
How the community answered
(30 responses)- B93% (28)
- C3% (1)
- D3% (1)
Why each option
A replay attack involves capturing and retransmitting valid data transmissions to impersonate a user or repeat an action, directly targeting the authentication process. It bypasses security by reusing legitimate credentials or session tokens.
Availability refers to the system being accessible when needed; while a replay attack can disrupt service, its primary target is not availability but rather authentication.
A replay attack aims to re-transmit valid data, often authentication credentials or session tokens, that were previously captured during a legitimate communication session. By replaying this data, an attacker can trick a system into believing they are an authorized user, thereby compromising the authentication process and gaining unauthorized access.
Confidentiality refers to protecting information from unauthorized disclosure; while a replay attack might indirectly lead to confidentiality breaches, its direct mechanism doesn't inherently compromise confidentiality.
Integrity refers to ensuring data has not been altered; a replay attack reuses unaltered data, so it doesn't directly compromise the integrity of the data itself, but rather the integrity of the authentication process.
Concept tested: Replay attack impact on authentication
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/replay-attacks
Topics
Community Discussion
No community discussion yet for this question.