N10-005 · Question #799
A malicious user connects to an open wireless network and is able to copy, reassemble and play back live VoIP data streams from wireless VoIP users. Which of the following attacks has the user…
The correct answer is C. Packet Sniffing. Capturing, reassembling, and replaying live VoIP streams from an open wireless network is a packet sniffing attack. The attacker passively collected unencrypted network traffic to reconstruct the audio data.
Question
A malicious user connects to an open wireless network and is able to copy, reassemble and play back live VoIP data streams from wireless VoIP users. Which of the following attacks has the user performed?
Options
- AMan-in-the-middle
- BEvil Twin
- CPacket Sniffing
- DIV attack
How the community answered
(59 responses)- A2% (1)
- B3% (2)
- C88% (52)
- D7% (4)
Why each option
Capturing, reassembling, and replaying live VoIP streams from an open wireless network is a packet sniffing attack. The attacker passively collected unencrypted network traffic to reconstruct the audio data.
A man-in-the-middle attack requires the attacker to actively intercept and relay communications between two parties, not simply passively capture and replay existing streams.
An evil twin attack involves creating a rogue access point that mimics a legitimate one to lure clients into connecting, which is not described in this scenario.
Packet sniffing involves using a network analyzer or sniffer tool to capture frames traversing the network. On an open (unencrypted) wireless network, all traffic including VoIP RTP streams is transmitted in cleartext, allowing a passive attacker to capture and reassemble the media without injecting or modifying traffic.
An IV (Initialization Vector) attack exploits weak or reused IVs in WEP encryption to recover the encryption key, which is unrelated to capturing and replaying VoIP streams on an open network.
Concept tested: Wireless packet sniffing on open networks
Source: https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/63884-voip-eavesdropping.html
Topics
Community Discussion
No community discussion yet for this question.