nerdexam
CompTIA

N10-005 · Question #561

A technician recently fixed a computer with several viruses and spyware programs on it and notices the Internet settings were set to redirect all traffic through an unknown proxy. This type of…

The correct answer is C. Man-in-the-middle. Redirecting all Internet traffic through an unknown proxy intercepts communications between the user and their intended destinations, which is the defining behavior of a man-in-the-middle attack.

Network security

Question

A technician recently fixed a computer with several viruses and spyware programs on it and notices the Internet settings were set to redirect all traffic through an unknown proxy. This type of attack is known as which of the following?

Options

  • APhishing
  • BSocial engineering
  • CMan-in-the-middle
  • DShoulder surfing

How the community answered

(63 responses)
  • A
    3% (2)
  • B
    5% (3)
  • C
    90% (57)
  • D
    2% (1)

Why each option

Redirecting all Internet traffic through an unknown proxy intercepts communications between the user and their intended destinations, which is the defining behavior of a man-in-the-middle attack.

APhishing

Phishing uses deceptive messages or fake websites to trick users into surrendering credentials and does not involve proxy redirection.

BSocial engineering

Social engineering manipulates people psychologically to divulge information or take actions, and is not a technical network interception technique.

CMan-in-the-middleCorrect

A man-in-the-middle (MITM) attack involves an adversary secretly inserting themselves into the communication path between two parties. Configuring the browser's proxy settings to route all traffic through an attacker-controlled server achieves this by allowing the attacker to intercept, inspect, and potentially modify all HTTP/HTTPS requests and responses without the user's knowledge.

DShoulder surfing

Shoulder surfing involves physically observing a user's screen or keyboard and has no relation to proxy configuration.

Concept tested: Man-in-the-middle attack via proxy redirection

Source: https://owasp.org/www-community/attacks/Manipulator-in-the-middle_attack

Topics

#man-in-the-middle#proxy redirect#malware#network attacks

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full N10-005 Practice