SSCP · Question #1094
The act of intercepting the first message in a public key exchange and substituting a bogus key for the original key is an example of which style of attack?
The correct answer is C. ManIn The Middle. Intercepting the first message of a public key exchange and substituting a bogus key to facilitate communication through an attacker is a classic example of a Man-in-the-Middle (MITM) attack.
Question
The act of intercepting the first message in a public key exchange and substituting a bogus key for the original key is an example of which style of attack?
Options
- ASpoofing
- BHijacking
- CManIn The Middle
- DSocial Engineering
- EDistributed Denial of Service (DDoS)
How the community answered
(70 responses)- A1% (1)
- B4% (3)
- C87% (61)
- D1% (1)
- E6% (4)
Why each option
Intercepting the first message of a public key exchange and substituting a bogus key to facilitate communication through an attacker is a classic example of a Man-in-the-Middle (MITM) attack.
Spoofing refers to masquerading as another entity, which can be a component of an MITM attack but doesn't describe the full interception and substitution process during a key exchange.
Hijacking typically involves taking control of an already established session or system, rather than manipulating the initial key exchange handshake.
A Man-in-the-Middle (MITM) attack occurs when an attacker secretly relays and potentially alters communication between two parties who believe they are communicating directly. In a public key exchange, the attacker replaces the legitimate public key with their own, enabling them to decrypt and re-encrypt all traffic between the two unsuspecting parties.
Social Engineering relies on psychological manipulation of individuals, not on the technical interception and substitution of cryptographic keys.
A Distributed Denial of Service (DDoS) attack aims to overwhelm a system to disrupt its availability, which is entirely different from intercepting and manipulating a public key exchange.
Concept tested: Cryptographic attacks - Man-in-the-Middle
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/man-in-the-middle-attacks
Topics
Community Discussion
No community discussion yet for this question.