Eccouncil 212-89 Exam - Topic 2 Question 43 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 43
Topic #: 2

Which of the following techniques helps incident handlers to detect man-in-the-middle attack by finding the new APs and trying to connect an already established channel,

even if the spoofed AP consists similar IP and MAC addresses as of the original AP?

AWireless client monitoring

BNetwork traffic monitoring

CGeneral wireless traffic monitoring

DAccess point monitoring

Show Suggested Answer

Suggested Answer: A

by Maurine at Apr 26, 2023, 03:53 AM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Darnell

4 months ago

I read that access point monitoring is crucial for this kind of attack detection.

upvoted 0 times

...

Mitsue

4 months ago

Wait, can you really detect a spoofed AP just by monitoring? Sounds tricky!

upvoted 0 times

...

Herman

4 months ago

Not so sure about that, I feel like network traffic monitoring could work too.

upvoted 0 times

...

Leonida

4 months ago

Totally agree, that's the best way to spot those fake APs!

upvoted 0 times

...

Lizbeth

4 months ago

I think it's definitely A, wireless client monitoring.

upvoted 0 times

...

Janessa

5 months ago

I’m leaning towards wireless client monitoring since it focuses on the clients connecting to APs, but I could be mixing it up with another topic.

upvoted 0 times

...

Glory

5 months ago

General wireless traffic monitoring sounds familiar, but I feel like it might be too broad for this specific scenario.

upvoted 0 times

...

Eugene

5 months ago

I remember practicing a question about network traffic monitoring, but I can't recall if that specifically helps with man-in-the-middle attacks.

upvoted 0 times

...

Buddy

5 months ago

I think it might be access point monitoring, but I'm not entirely sure. It seems like the most relevant option for detecting spoofed APs.

upvoted 0 times

...

Novella

5 months ago

Hmm, I'm a bit unsure about the difference between Level-1 and Level-2 backups. I'll need to review my notes on PolarDB backup strategies to make sure I understand the implications of each option.

upvoted 0 times

...

Elouise

5 months ago

I'm a bit confused here. I'm not sure which of these directories would need to be mounted with read and write access on its own file system.

upvoted 0 times

...

Linwood

5 months ago

Okay, let me think this through. The system boundary separates the system from the context, and the context boundary defines the system context. I think options A and E are the correct answers here.

upvoted 0 times

...

Demetra

5 months ago

I'm leaning towards option C - duplicating the data in a separate BigQuery dataset. That way, I can quickly restore the data if needed.

upvoted 0 times

...

Lenny

10 months ago

Wait, is this a trick question? I feel like I'm being lured into a man-in-the-middle attack just by thinking about it!

upvoted 0 times

...

Edna

10 months ago

You know, if I had a dollar for every time I had to deal with a man-in-the-middle attack, I'd be a millionaire by now. But hey, at least it keeps us on our toes, right?

upvoted 0 times

Galen

8 months ago

C) General wireless traffic monitoring

upvoted 0 times

...

Lacresha

8 months ago

B) Network traffic monitoring

upvoted 0 times

...

Lawanda

8 months ago

A) Wireless client monitoring

upvoted 0 times

...

Rosina

10 months ago

I'm leaning towards option D, access point monitoring. Wouldn't that give us the best visibility into the APs and any potential spoofing attempts?

upvoted 0 times

Jaclyn

8 months ago

Let's go with option D then, access point monitoring.

upvoted 0 times

...

Louvenia

9 months ago

Yeah, it would definitely help us detect any spoofed APs.

upvoted 0 times

...

Amber

9 months ago

I think access point monitoring is the way to go.

upvoted 0 times

...

Brittani

10 months ago

Hmm, network traffic monitoring sounds like a solid choice. It should be able to pick up on any suspicious activity within the established channel.

upvoted 0 times

Emogene

9 months ago

I agree, network traffic monitoring would definitely help in detecting any suspicious activity.

upvoted 0 times

...

Lashaunda

9 months ago

D) Access point monitoring

upvoted 0 times

...

Valene

9 months ago

C) General wireless traffic monitoring

upvoted 0 times

...

Ty

9 months ago

B) Network traffic monitoring

upvoted 0 times

...

Buddy

10 months ago

A) Wireless client monitoring

upvoted 0 times

...

Carin

10 months ago

I believe the answer is D) Access point monitoring, as it specifically mentions finding new APs.

upvoted 0 times

...

Ben

10 months ago

I think option C is the way to go. General wireless traffic monitoring seems like the best technique to detect man-in-the-middle attacks by identifying new APs and verifying the connection.

upvoted 0 times

...

Angelyn

11 months ago

I agree with Fatima, because monitoring the wireless clients can help detect any unusual activity.

upvoted 0 times

...

Fatima

11 months ago

I think the answer is A) Wireless client monitoring.

upvoted 0 times

...