Threats & AttacksQuestion 19 of 100
Which attack intercepts and possibly alters communication between two parties who believe they are talking directly?
a.Denial-of-service
b.On-path (man-in-the-middle)
c.Brute force
d.Cross-site request forgery
Explanation
An on-path attack, historically called man-in-the-middle, positions the attacker between two endpoints to eavesdrop or tamper with traffic. Unencrypted channels are especially vulnerable. Strong encryption and certificate validation mitigate it.
Practice all 100 questions free — no signup required.
Related questions on this topic
- An attacker registers a domain like 'goggle.com' hoping users mistype the real address. This is:
- Which type of malware hides deep in the operating system to conceal its presence and maintain privileged access?
- A phishing attack that specifically targets a high-value executive is known as:
- A malicious script stored on a vulnerable web page runs in other users' browsers when they view it. This is:
- Which term describes exploiting a time gap between checking a resource and using it?
- An attacker follows an employee through a secured door without badging in. This physical attack is called:
Last reviewed: · editorial process
Sen Lin, PrepPass Founder · Verified against CompTIA Security+ (SY0-701) · How we review