GSLC · Question #435
Which of the following provides the best protection against a man-in-the-middle attack?
The correct answer is A. Strong encryption. Strong encryption is the best defense against man-in-the-middle attacks because it renders intercepted data unreadable to the attacker even if traffic is captured.
Question
Which of the following provides the best protection against a man-in-the-middle attack?
Options
- AStrong encryption
- BFiber-optic cable
- CFirewall
- DStrong password
How the community answered
(31 responses)- A90% (28)
- C6% (2)
- D3% (1)
Why each option
Strong encryption is the best defense against man-in-the-middle attacks because it renders intercepted data unreadable to the attacker even if traffic is captured.
A man-in-the-middle attack relies on an attacker intercepting and reading or modifying communications between two parties. Strong encryption, such as TLS, ensures that even if the attacker captures the traffic, they cannot decrypt or alter the payload without the cryptographic keys. This directly neutralizes the core capability the attacker relies on in a MITM attack.
Fiber-optic cable is more difficult to physically tap than copper, but it is not impossible, and does not protect against logical MITM attacks on the network layer.
A firewall controls traffic at network boundaries but does not encrypt data in transit and cannot prevent an attacker who is already positioned between the communicating parties.
A strong password protects authentication credentials but does not protect the confidentiality or integrity of data transmitted over the network during a session.
Concept tested: Encryption as defense against man-in-the-middle attacks
Source: https://csrc.nist.gov/glossary/term/man_in_the_middle_attack
Topics
Community Discussion
No community discussion yet for this question.