nerdexam
GIAC

GSLC · Question #435

Which of the following provides the best protection against a man-in-the-middle attack?

The correct answer is A. Strong encryption. Strong encryption is the best defense against man-in-the-middle attacks because it renders intercepted data unreadable to the attacker even if traffic is captured.

Security Architecture & Engineering

Question

Which of the following provides the best protection against a man-in-the-middle attack?

Options

  • AStrong encryption
  • BFiber-optic cable
  • CFirewall
  • DStrong password

How the community answered

(31 responses)
  • A
    90% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Strong encryption is the best defense against man-in-the-middle attacks because it renders intercepted data unreadable to the attacker even if traffic is captured.

AStrong encryptionCorrect

A man-in-the-middle attack relies on an attacker intercepting and reading or modifying communications between two parties. Strong encryption, such as TLS, ensures that even if the attacker captures the traffic, they cannot decrypt or alter the payload without the cryptographic keys. This directly neutralizes the core capability the attacker relies on in a MITM attack.

BFiber-optic cable

Fiber-optic cable is more difficult to physically tap than copper, but it is not impossible, and does not protect against logical MITM attacks on the network layer.

CFirewall

A firewall controls traffic at network boundaries but does not encrypt data in transit and cannot prevent an attacker who is already positioned between the communicating parties.

DStrong password

A strong password protects authentication credentials but does not protect the confidentiality or integrity of data transmitted over the network during a session.

Concept tested: Encryption as defense against man-in-the-middle attacks

Source: https://csrc.nist.gov/glossary/term/man_in_the_middle_attack

Topics

#man-in-the-middle attack#encryption#attack mitigation#network security controls

Community Discussion

No community discussion yet for this question.

Full GSLC Practice