nerdexam
GIAC

GSLC · Question #538

In what type of attack does an attacker capture packets containing passwords or digital signatures whenever packets pass between two hosts on a network?

The correct answer is D. Replay attack. A replay attack involves an attacker capturing legitimate authentication packets and retransmitting them later to gain unauthorized access.

Security Architecture & Engineering

Question

In what type of attack does an attacker capture packets containing passwords or digital signatures whenever packets pass between two hosts on a network?

Options

  • ADictionary attack
  • BPing flood attack
  • CDoS attack
  • DReplay attack

How the community answered

(52 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    2% (1)
  • D
    90% (47)

Why each option

A replay attack involves an attacker capturing legitimate authentication packets and retransmitting them later to gain unauthorized access.

ADictionary attack

A dictionary attack attempts to crack passwords offline by systematically trying words from a predefined list, not by capturing live network packets.

BPing flood attack

A ping flood attack overwhelms a target with ICMP echo requests to cause a denial of service, not to capture authentication credentials.

CDoS attack

A DoS attack aims to disrupt availability of a service rather than capture and reuse authentication data from network traffic.

DReplay attackCorrect

In a replay attack, the attacker eavesdrops on network traffic to capture packets containing credentials or digital signatures, then retransmits those packets to impersonate the original sender. The attacker does not need to decrypt the captured data - simply resending valid authentication material is sufficient to authenticate as the victim. This attack specifically targets the integrity and freshness of authentication exchanges.

Concept tested: Replay attack capturing authentication packets

Source: https://csrc.nist.gov/glossary/term/replay_attack

Topics

#replay attack#packet capture#credential theft#network attacks

Community Discussion

No community discussion yet for this question.

Full GSLC Practice