nerdexam
(ISC)2

SSCP · Question #1094

The act of intercepting the first message in a public key exchange and substituting a bogus key for the original key is an example of which style of attack?

The correct answer is C. ManIn The Middle. Intercepting the first message of a public key exchange and substituting a bogus key to facilitate communication through an attacker is a classic example of a Man-in-the-Middle (MITM) attack.

Submitted by paula_co· Apr 18, 2026Network and Communications Security

Question

The act of intercepting the first message in a public key exchange and substituting a bogus key for the original key is an example of which style of attack?

Options

  • ASpoofing
  • BHijacking
  • CManIn The Middle
  • DSocial Engineering
  • EDistributed Denial of Service (DDoS)

How the community answered

(70 responses)
  • A
    1% (1)
  • B
    4% (3)
  • C
    87% (61)
  • D
    1% (1)
  • E
    6% (4)

Why each option

Intercepting the first message of a public key exchange and substituting a bogus key to facilitate communication through an attacker is a classic example of a Man-in-the-Middle (MITM) attack.

ASpoofing

Spoofing refers to masquerading as another entity, which can be a component of an MITM attack but doesn't describe the full interception and substitution process during a key exchange.

BHijacking

Hijacking typically involves taking control of an already established session or system, rather than manipulating the initial key exchange handshake.

CManIn The MiddleCorrect

A Man-in-the-Middle (MITM) attack occurs when an attacker secretly relays and potentially alters communication between two parties who believe they are communicating directly. In a public key exchange, the attacker replaces the legitimate public key with their own, enabling them to decrypt and re-encrypt all traffic between the two unsuspecting parties.

DSocial Engineering

Social Engineering relies on psychological manipulation of individuals, not on the technical interception and substitution of cryptographic keys.

EDistributed Denial of Service (DDoS)

A Distributed Denial of Service (DDoS) attack aims to overwhelm a system to disrupt its availability, which is entirely different from intercepting and manipulating a public key exchange.

Concept tested: Cryptographic attacks - Man-in-the-Middle

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/man-in-the-middle-attacks

Topics

#Man-in-the-Middle (MitM)#Public Key Exchange#Network Attacks#Cryptographic Attacks

Community Discussion

No community discussion yet for this question.

Full SSCP Practice