During a security audit, a penetration tester wants to exploit a vulnerability in a common network protocol. The protocol allows encrypted communications to be intercepted and manipulated. Which of th

Question

Options

• ACVE-202W-ZZZZ: Cisco ASA IKEv2/IPSec Fragmentation Vulnerability
• BCVE-202Y-XXXX: Wireshark SSL/TLS Decryption Vulnerability
• CCVE-202X-YYYY: OpenSSL DROWN Attack
• DCVE-202Z-WWWW: Microsoft SMBv1 EternalBlue Exploit

• A
  3% (1)
• B
  12% (4)
• C
  76% (26)
• D
  9% (3)

Explanation

Explanation

Option C is correct because the OpenSSL DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) Attack specifically targets a vulnerability in SSL/TLS - a common network encryption protocol - that allows an attacker to intercept and decrypt encrypted communications, and even manipulate sessions, by exploiting servers that still support the outdated SSLv2 protocol alongside modern TLS. Option A (Cisco ASA IKEv2/IPSec Fragmentation) targets a specific vendor's VPN implementation and causes crashes/DoS rather than enabling interception and manipulation of encrypted traffic. Option B (Wireshark SSL/TLS Decryption) is a tool-based analysis feature, not an exploitable vulnerability that allows active manipulation of communications. Option D (EternalBlue/SMBv1) targets a file-sharing protocol vulnerability that enables remote code execution, not the interception or manipulation of encrypted communications.

Memory Tip: Think DROWN = "Drowning encryption" - it pulls encrypted traffic under (decrypts it), perfectly matching the clue "encrypted communications intercepted and manipulated." If the question mentions encrypted protocol exploitation with interception, think OpenSSL/DROWN first.

No community discussion yet for this question.