nerdexam
GIAC

GSLC · Question #444

Which of the following can provide security against man-in-the-middle attack?

The correct answer is A. Strong data encryption during travel. Strong encryption of data in transit is the primary defense against man-in-the-middle attacks because it renders intercepted data unreadable and detects tampering through integrity verification.

Security Architecture & Engineering

Question

Which of the following can provide security against man-in-the-middle attack?

Options

  • AStrong data encryption during travel
  • BFirewall
  • CAnti-virus programs
  • DStrong authentication method

How the community answered

(22 responses)
  • A
    95% (21)
  • B
    5% (1)

Why each option

Strong encryption of data in transit is the primary defense against man-in-the-middle attacks because it renders intercepted data unreadable and detects tampering through integrity verification.

AStrong data encryption during travelCorrect

Strong end-to-end encryption (such as TLS/SSL) protects against man-in-the-middle attacks by ensuring that even if an attacker intercepts the data in transit, they cannot read or alter it without the cryptographic keys. Integrity checks embedded in protocols like TLS also detect any tampering with encrypted payloads, making MITM exploitation ineffective.

BFirewall

A firewall filters traffic at network boundaries based on rules but cannot decrypt or inspect encrypted sessions to detect an attacker who has already positioned themselves between two communicating parties.

CAnti-virus programs

Anti-virus programs detect and remove malware on endpoints but provide no mechanism to detect or prevent interception of network communications occurring between systems.

DStrong authentication method

Strong authentication verifies identity at the time of login but does not protect the confidentiality or integrity of data transmitted after authentication, leaving sessions vulnerable to interception if traffic is not also encrypted.

Concept tested: Encryption as defense against man-in-the-middle attacks

Source: https://owasp.org/www-community/attacks/Manipulator-in-the-middle_attack

Topics

#man-in-the-middle attack#data encryption#network security#encryption in transit

Community Discussion

No community discussion yet for this question.

Full GSLC Practice