Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-89 Exam - Topic 2 Question 43 Discussion

Posted by Maurine on Apr 26, 2023 at 03:53 AM

Which of the following techniques helps incident handlers to detect man-in-the-middle attack by finding the new APs and trying to connect an already established channel,

even if the spoofed AP consists similar IP and MAC addresses as of the original AP?

Suggested Answer: A

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
32 comments · newest first
DA
Darnell 11 months ago
I read that access point monitoring is crucial for this kind of attack detection.
MI
Mitsue 11 months ago
Wait, can you really detect a spoofed AP just by monitoring? Sounds tricky!
HE
Herman 12 months ago
Not so sure about that, I feel like network traffic monitoring could work too.
LE
Leonida 12 months ago
Totally agree, that's the best way to spot those fake APs!
LI
Lizbeth 1 year ago
I think it's definitely A, wireless client monitoring.
JA
Janessa 1 year ago
I’m leaning towards wireless client monitoring since it focuses on the clients connecting to APs, but I could be mixing it up with another topic.
GL
Glory 1 year ago
General wireless traffic monitoring sounds familiar, but I feel like it might be too broad for this specific scenario.
EU
Eugene 1 year ago
I remember practicing a question about network traffic monitoring, but I can't recall if that specifically helps with man-in-the-middle attacks.
BU
Buddy 1 year ago
I think it might be access point monitoring, but I'm not entirely sure. It seems like the most relevant option for detecting spoofed APs.
NO
Novella 1 year ago
Hmm, I'm a bit unsure about the difference between Level-1 and Level-2 backups. I'll need to review my notes on PolarDB backup strategies to make sure I understand the implications of each option.
EL
Elouise 1 year ago
I'm a bit confused here. I'm not sure which of these directories would need to be mounted with read and write access on its own file system.
LI
Linwood 1 year ago
Okay, let me think this through. The system boundary separates the system from the context, and the context boundary defines the system context. I think options A and E are the correct answers here.
DE
Demetra 1 year ago
I'm leaning towards option C - duplicating the data in a separate BigQuery dataset. That way, I can quickly restore the data if needed.
LE
Lenny 1 year ago
Wait, is this a trick question? I feel like I'm being lured into a man-in-the-middle attack just by thinking about it!
ED
Edna 1 year ago
You know, if I had a dollar for every time I had to deal with a man-in-the-middle attack, I'd be a millionaire by now. But hey, at least it keeps us on our toes, right?
GA
Galen 1 year ago
↳ replying to Edna
C) General wireless traffic monitoring
LA
Lacresha 1 year ago
↳ replying to Edna
B) Network traffic monitoring
LA
Lawanda 1 year ago
↳ replying to Edna
A) Wireless client monitoring
RO
Rosina 1 year ago
I'm leaning towards option D, access point monitoring. Wouldn't that give us the best visibility into the APs and any potential spoofing attempts?
JA
Jaclyn 1 year ago
↳ replying to Rosina
Let's go with option D then, access point monitoring.
LO
Louvenia 1 year ago
↳ replying to Rosina
Yeah, it would definitely help us detect any spoofed APs.
AM
Amber 1 year ago
↳ replying to Rosina
I think access point monitoring is the way to go.
BR
Brittani 2 years ago
Hmm, network traffic monitoring sounds like a solid choice. It should be able to pick up on any suspicious activity within the established channel.
EM
Emogene 1 year ago
↳ replying to Brittani
I agree, network traffic monitoring would definitely help in detecting any suspicious activity.
LA
Lashaunda 1 year ago
↳ replying to Brittani
D) Access point monitoring
VA
Valene 1 year ago
↳ replying to Brittani
C) General wireless traffic monitoring
TY
Ty 1 year ago
↳ replying to Brittani
B) Network traffic monitoring
BU
Buddy 1 year ago
↳ replying to Brittani
A) Wireless client monitoring
CA
Carin 2 years ago
I believe the answer is D) Access point monitoring, as it specifically mentions finding new APs.
BE
Ben 2 years ago
I think option C is the way to go. General wireless traffic monitoring seems like the best technique to detect man-in-the-middle attacks by identifying new APs and verifying the connection.
AN
Angelyn 2 years ago
I agree with Fatima, because monitoring the wireless clients can help detect any unusual activity.
FA
Fatima 2 years ago
I think the answer is A) Wireless client monitoring.
0/2000 characters

Save Cancel