GPEN · Question #19
Which of the following attacks is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they ar
The correct answer is C. Man-in-the-middle. A Man-in-the-Middle (MITM) attack is defined by the attacker secretly intercepting and relaying communications between two parties, each believing they have a direct private connection.
Question
Which of the following attacks is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker?
Options
- ADoS
- BSniffing
- CMan-in-the-middle
- DBrute force
How the community answered
(28 responses)- A7% (2)
- B11% (3)
- C79% (22)
- D4% (1)
Why each option
A Man-in-the-Middle (MITM) attack is defined by the attacker secretly intercepting and relaying communications between two parties, each believing they have a direct private connection.
A DoS (Denial of Service) attack aims to make a resource unavailable to legitimate users, not to intercept or relay communications.
Sniffing is passive eavesdropping that captures traffic without modifying or relaying it, so the attacker does not make independent connections with the victims.
In a Man-in-the-Middle attack the adversary inserts themselves between two communicating parties, establishing separate connections with each victim and transparently forwarding - and potentially altering - traffic between them. Because each victim believes they are communicating directly with the other, the attack is classified as active eavesdropping rather than passive sniffing. Common implementations include ARP spoofing, SSL stripping, and rogue access points.
A brute force attack attempts to discover credentials or encryption keys through exhaustive trial-and-error and does not involve intercepting communications between parties.
Concept tested: Man-in-the-Middle active eavesdropping attack definition
Source: https://csrc.nist.gov/glossary/term/man_in_the_middle_attack
Topics
Community Discussion
No community discussion yet for this question.