nerdexam
GIAC

GPEN · Question #19

Which of the following attacks is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they ar

The correct answer is C. Man-in-the-middle. A Man-in-the-Middle (MITM) attack is defined by the attacker secretly intercepting and relaying communications between two parties, each believing they have a direct private connection.

Exploitation & Post-Exploitation Techniques

Question

Which of the following attacks is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker?

Options

  • ADoS
  • BSniffing
  • CMan-in-the-middle
  • DBrute force

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    11% (3)
  • C
    79% (22)
  • D
    4% (1)

Why each option

A Man-in-the-Middle (MITM) attack is defined by the attacker secretly intercepting and relaying communications between two parties, each believing they have a direct private connection.

ADoS

A DoS (Denial of Service) attack aims to make a resource unavailable to legitimate users, not to intercept or relay communications.

BSniffing

Sniffing is passive eavesdropping that captures traffic without modifying or relaying it, so the attacker does not make independent connections with the victims.

CMan-in-the-middleCorrect

In a Man-in-the-Middle attack the adversary inserts themselves between two communicating parties, establishing separate connections with each victim and transparently forwarding - and potentially altering - traffic between them. Because each victim believes they are communicating directly with the other, the attack is classified as active eavesdropping rather than passive sniffing. Common implementations include ARP spoofing, SSL stripping, and rogue access points.

DBrute force

A brute force attack attempts to discover credentials or encryption keys through exhaustive trial-and-error and does not involve intercepting communications between parties.

Concept tested: Man-in-the-Middle active eavesdropping attack definition

Source: https://csrc.nist.gov/glossary/term/man_in_the_middle_attack

Topics

#man-in-the-middle#active eavesdropping#network interception#relay attack

Community Discussion

No community discussion yet for this question.

Full GPEN Practice