GSLC · Question #538
In what type of attack does an attacker capture packets containing passwords or digital signatures whenever packets pass between two hosts on a network?
The correct answer is D. Replay attack. A replay attack involves an attacker capturing legitimate authentication packets and retransmitting them later to gain unauthorized access.
Question
In what type of attack does an attacker capture packets containing passwords or digital signatures whenever packets pass between two hosts on a network?
Options
- ADictionary attack
- BPing flood attack
- CDoS attack
- DReplay attack
How the community answered
(52 responses)- A2% (1)
- B6% (3)
- C2% (1)
- D90% (47)
Why each option
A replay attack involves an attacker capturing legitimate authentication packets and retransmitting them later to gain unauthorized access.
A dictionary attack attempts to crack passwords offline by systematically trying words from a predefined list, not by capturing live network packets.
A ping flood attack overwhelms a target with ICMP echo requests to cause a denial of service, not to capture authentication credentials.
A DoS attack aims to disrupt availability of a service rather than capture and reuse authentication data from network traffic.
In a replay attack, the attacker eavesdrops on network traffic to capture packets containing credentials or digital signatures, then retransmits those packets to impersonate the original sender. The attacker does not need to decrypt the captured data - simply resending valid authentication material is sufficient to authenticate as the victim. This attack specifically targets the integrity and freshness of authentication exchanges.
Concept tested: Replay attack capturing authentication packets
Source: https://csrc.nist.gov/glossary/term/replay_attack
Topics
Community Discussion
No community discussion yet for this question.