nerdexam
GIAC

GSLC · Question #45

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

The correct answer is B. Man-in-the-middle attack. A man-in-the-middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters communications between two hosts by inserting themselves into the communication path.

Security Architecture & Engineering

Question

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

Options

  • ADictionary attack
  • BMan-in-the-middle attack
  • CDenial-of-service attack
  • DPassword guessing attack

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    94% (17)

Why each option

A man-in-the-middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters communications between two hosts by inserting themselves into the communication path.

ADictionary attack

A dictionary attack attempts to crack passwords by systematically trying words from a predefined list, not by intercepting communications between hosts.

BMan-in-the-middle attackCorrect

In a MITM attack, the attacker positions software or a device between two communicating hosts, intercepting traffic from both sides without either party being aware. This allows the attacker to eavesdrop, modify, or inject data into the session. It is the only option that involves inserting an intermediary between two communicating parties.

CDenial-of-service attack

A denial-of-service attack floods a target system with traffic or requests to make it unavailable, not to insert an intermediary into a communication path.

DPassword guessing attack

A password guessing attack repeatedly tries credential combinations to gain unauthorized access, which does not involve inserting a program between two communicating hosts.

Concept tested: Man-in-the-middle attack definition and mechanism

Source: https://csrc.nist.gov/glossary/term/man_in_the_middle_attack

Topics

#man-in-the-middle attack#network attacks#attack types#intermediary

Community Discussion

No community discussion yet for this question.

Full GSLC Practice