nerdexam
Netskope

NSK101 · Question #33

You want to prevent Man-in-the-Middle (MITM) attacks on an encrypted website or application. In this scenario, which method would you use?

The correct answer is B. Use certificate pinning.. To prevent Man-in-the-Middle (MITM) attacks on an encrypted website or application, one method that you can use is certificate pinning. Certificate pinning is a technique that restricts which certificates are considered valid for a particular website or application, limiting risk

Real-time Threat Protection and Incident Response

Question

You want to prevent Man-in-the-Middle (MITM) attacks on an encrypted website or application. In this scenario, which method would you use?

Options

  • AUse a stronger encryption algorithm.
  • BUse certificate pinning.
  • CUse a proxy for the connection.
  • DUse a weaker encryption algorithm.

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    82% (28)
  • C
    9% (3)
  • D
    3% (1)

Explanation

To prevent Man-in-the-Middle (MITM) attacks on an encrypted website or application, one method that you can use is certificate pinning. Certificate pinning is a technique that restricts which certificates are considered valid for a particular website or application, limiting risk. Instead of allowing any trusted certificate to be used, operators "pin" the certificate authority (CA) issuer(s), public keys or even end-entity certificates of their choice. Certificate pinning helps to prevent MITM attacks by validating the server certificates against a hardcoded list of certificates in the website or application. If an attacker tries to intercept or modify the traffic using a fraudulent or compromised certificate, it will be rejected by the website or application as invalid, even if it is signed by a trusted CA.

Topics

#MITM attacks#certificate pinning#SSL/TLS security#encrypted traffic

Community Discussion

No community discussion yet for this question.

Full NSK101 Practice