nerdexam
GIAC

GCIH · Question #165

Which of the following is used by attackers to obtain an authenticated connection on a network?

The correct answer is B. Replay attack. A replay attack captures a valid authentication session or token and retransmits it to gain unauthorized but authenticated network access.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following is used by attackers to obtain an authenticated connection on a network?

Options

  • ADenial-of-Service (DoS) attack
  • BReplay attack
  • CMan-in-the-middle attack
  • DBack door

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    89% (34)
  • C
    3% (1)
  • D
    5% (2)

Why each option

A replay attack captures a valid authentication session or token and retransmits it to gain unauthorized but authenticated network access.

ADenial-of-Service (DoS) attack

A Denial-of-Service attack floods a target to disrupt availability, not to establish an authenticated connection.

BReplay attackCorrect

A replay attack works by intercepting a legitimate, authenticated session token or credential exchange and retransmitting it to the target system. Because the replayed data is indistinguishable from a genuine authentication event, the network grants the attacker an authenticated connection. This technique bypasses the need to crack passwords since the attacker reuses already-valid session material.

CMan-in-the-middle attack

A man-in-the-middle attack positions the attacker between two parties to intercept or alter traffic, but it does not specifically replay captured credentials to obtain a new authenticated session.

DBack door

A back door is a hidden access mechanism planted in a system, not a technique for capturing and reusing another user's authenticated session.

Concept tested: Replay attack as an authentication bypass technique

Source: https://owasp.org/www-community/attacks/Replay_Attack

Topics

#replay attack#authenticated connection#session hijacking#network attack

Community Discussion

No community discussion yet for this question.

Full GCIH Practice