Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 312-38 Exam - Topic 9 Question 100 Discussion

Posted by Elfrieda on Jan 14, 2025 at 06:58 AM

Arman transferred some money to his friend's account using a net banking service. After a few hours, his friend informed him that he hadn't received the money yet. Arman logged on to the bank's website to investigate and discovered that the amount had been transferred to an unknown account instead. The bank, upon receiving Arman's complaint, discovered that someone had established a station between Arman's and the bank server's communication system. The station intercepted the communication and inserted another account number replacing his friend's account number. What is

such an attack called?

Suggested Answer: C

The scenario described is a classic example of a Man-in-the-Middle (MitM) attack. In this type of cyberattack, the attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other. The attacker has inserted themselves between the two parties, in this case, Arman and the bank's server, and has intercepted the communication to redirect the funds to a different account. This type of attack can occur in various forms, such as eavesdropping on or altering the communication over an insecure network service, but it is characterized by the attacker's ability to intercept and modify the data being exchanged without either legitimate party noticing.


Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
29 comments · newest first
SH
Sharen 11 months ago
Privilege Escalation doesn't fit here, it's clearly C.
FR
Francene 11 months ago
This is why I never trust online banking completely.
CR
Cruz 11 months ago
Wow, I didn't know they could intercept like that!
BU
Buddy 12 months ago
Wait, are you sure? I thought it was DNS Poisoning.
JE
Jean 12 months ago
That's definitely a Man-in-the-Middle Attack!
JA
Jaime 12 months ago
I feel like I might confuse it with DNS Cache Poisoning, but the interception part makes me lean towards the Man-in-the-Middle option.
LA
Laurene 1 year ago
I practiced a similar question where an attacker intercepted data, and I think it was also a Man-in-the-Middle Attack.
AR
Arlen 1 year ago
I’m not entirely sure, but I think DNS Poisoning is related to redirecting traffic, not really what happened here.
GA
Gaston 1 year ago
I remember studying about different types of cyber attacks, and this sounds like a Man-in-the-Middle Attack.
MA
Marla 1 year ago
This is a tricky one. I'm not sure if it's a man-in-the-middle attack or something else. Maybe I should review the concepts of different network attacks to make sure I understand the differences. I don't want to guess and risk getting it wrong.
VA
Valene 1 year ago
Okay, let me break this down. The key details are that the attacker inserted a different account number, which suggests they were able to tamper with the communication. I think the man-in-the-middle attack is the most likely answer here.
YO
Yolande 1 year ago
Hmm, I'm a bit confused here. Could it also be a DNS poisoning attack, where the attacker redirects the communication to a malicious server? I'll need to think this through carefully.
JE
Jess 1 year ago
This seems like a classic man-in-the-middle attack, where the attacker intercepts the communication and modifies the transaction details. I'm pretty confident this is the right answer.
BR
Bronwyn 2 years ago
The Man-in-the-Middle attack is the way to go here. Intercepting the communication and changing the account number? That's some next-level stuff. I bet the bank's IT team is scratching their heads on this one.
BE
Ben 2 years ago
Haha, looks like someone's been watching too many spy movies! A Man-in-the-Middle attack, really? I guess the bank needs to beef up their security. Or maybe they just need to hire better hackers to guard against this kind of thing.
PA
Pamella 2 years ago
↳ replying to Ben
Yeah, the bank definitely needs to step up their security game.
IV
Ivory 2 years ago
↳ replying to Ben
I know right, it sounds like something out of a movie!
JU
Junita 2 years ago
I believe it's DNS Poisoning, as the attacker manipulated the communication between Arman and the bank server.
JA
Jamal 2 years ago
This is clearly a Man-in-the-Middle attack. The attacker snuck into the communication channel and altered the payment details. That's a bold move, but I wouldn't try that at home, folks!
MA
Marguerita 2 years ago
↳ replying to Jamal
I always make sure to double-check all my online transactions now.
OM
Omer 2 years ago
↳ replying to Jamal
Yeah, it's scary how sophisticated these cyber attacks can be.
HE
Hermila 2 years ago
↳ replying to Jamal
That's crazy! I can't believe someone would go to such lengths to steal money.
LE
Lettie 2 years ago
I agree with Sommer, it makes sense because someone intercepted the communication.
KE
Kenny 2 years ago
Ah, the classic Man-in-the-Middle attack. Classic move to intercept the communication and change the account number. Should have used a secure connection, Arman!
RA
Raylene 2 years ago
↳ replying to Kenny
Definitely, always important to take extra precautions when transferring money online.
TI
Tiera 2 years ago
↳ replying to Kenny
Arman should have used a secure connection to prevent this from happening.
LA
Lanie 2 years ago
↳ replying to Kenny
Yeah, it's called a Man-in-the-Middle attack. They can easily change the account number during the transfer.
BR
Brice 2 years ago
↳ replying to Kenny
I can't believe someone was able to intercept the communication between Arman and the bank server.
SO
Sommer 2 years ago
I think the attack is called Man-in-the-Middle Attack.
0/2000 characters

Save Cancel