GSLC Question #273: Real Exam Question with Answer & Explanation

The correct answer is C. Strong data encryption during travel. Man-in-the-middle attacks intercept data in transit, and strong encryption is the primary defense because it renders intercepted data unreadable even if captured.

Question

Which of the following can provide security against man-in-the-middle attack?

Options

AStrong authentication method
BFirewall
CStrong data encryption during travel
DAnti-virus programs

Explanation

Man-in-the-middle attacks intercept data in transit, and strong encryption is the primary defense because it renders intercepted data unreadable even if captured.

Common mistakes.

A. Strong authentication verifies user identity at login but does not prevent an attacker from intercepting and reading unencrypted data that is already in transit between endpoints.
B. A firewall filters traffic at the network perimeter but cannot stop a MITM attack occurring between two already-authenticated endpoints within or across a network.
D. Anti-virus programs detect and remove malware on host endpoints but have no capability to protect data flowing across a network from being intercepted by a third party.

Concept tested. Encryption as defense against MITM attacks

Reference. https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview

Community Discussion

No community discussion yet for this question.

Full GSLC Practice