SSCP · Question #1220
Inference attacks involve ___________________________.
The correct answer is D. Collecting unclassified pieces of information to predict or guess an outcome. The question defines what constitutes an inference attack in information security.
Question
Inference attacks involve ___________________________.
Options
- AGathering pieces of secret information to predict or guess an outcome
- BDeciphering encrypted communications
- CSpoofing a connection to intercept plain text transmissions
- DCollecting unclassified pieces of information to predict or guess an outcome
How the community answered
(41 responses)- A2% (1)
- B2% (1)
- C5% (2)
- D90% (37)
Why each option
The question defines what constitutes an inference attack in information security.
Inference attacks typically begin with unclassified or non-secret information, not secret information, to derive sensitive data.
Deciphering encrypted communications is cryptanalysis, which is distinct from inferring information from disparate non-confidential data points.
Spoofing connections to intercept plaintext transmissions is a form of sniffing or Man-in-the-Middle, which involves direct interception rather than inferential deduction.
Inference attacks involve gathering seemingly unclassified or non-secret pieces of information from various sources and correlating them to deduce or guess sensitive, classified, or secret data. The attacker infers private information from public or less sensitive data points.
Concept tested: Inference attack definition
Topics
Community Discussion
No community discussion yet for this question.