Eccouncil 312-38 Exam - Topic 9 Question 100 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 100
Topic #: 9

Arman transferred some money to his friend's account using a net banking service. After a few hours, his friend informed him that he hadn't received the money yet. Arman logged on to the bank's website to investigate and discovered that the amount had been transferred to an unknown account instead. The bank, upon receiving Arman's complaint, discovered that someone had established a station between Arman's and the bank server's communication system. The station intercepted the communication and inserted another account number replacing his friend's account number. What is

such an attack called?

APrivilege Escalation

BDNS Poisoning

CMan-in-the-Middle Attack

DDNS Cache Poisoning

Show Suggested Answer

Suggested Answer: C

The scenario described is a classic example of a Man-in-the-Middle (MitM) attack. In this type of cyberattack, the attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other. The attacker has inserted themselves between the two parties, in this case, Arman and the bank's server, and has intercepted the communication to redirect the funds to a different account. This type of attack can occur in various forms, such as eavesdropping on or altering the communication over an insecure network service, but it is characterized by the attacker's ability to intercept and modify the data being exchanged without either legitimate party noticing.

by Elfrieda at Jan 14, 2025, 06:58 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharen

3 months ago

Privilege Escalation doesn't fit here, it's clearly C.

upvoted 0 times

...

Francene

3 months ago

This is why I never trust online banking completely.

upvoted 0 times

...

Cruz

3 months ago

Wow, I didn't know they could intercept like that!

upvoted 0 times

...

Buddy

4 months ago

Wait, are you sure? I thought it was DNS Poisoning.

upvoted 0 times

...

Jean

4 months ago

That's definitely a Man-in-the-Middle Attack!

upvoted 0 times

...

Jaime

4 months ago

I feel like I might confuse it with DNS Cache Poisoning, but the interception part makes me lean towards the Man-in-the-Middle option.

upvoted 0 times

...

Laurene

4 months ago

I practiced a similar question where an attacker intercepted data, and I think it was also a Man-in-the-Middle Attack.

upvoted 0 times

...

Arlen

4 months ago

I’m not entirely sure, but I think DNS Poisoning is related to redirecting traffic, not really what happened here.

upvoted 0 times

...

Gaston

5 months ago

I remember studying about different types of cyber attacks, and this sounds like a Man-in-the-Middle Attack.

upvoted 0 times

...

Marla

5 months ago

This is a tricky one. I'm not sure if it's a man-in-the-middle attack or something else. Maybe I should review the concepts of different network attacks to make sure I understand the differences. I don't want to guess and risk getting it wrong.

upvoted 0 times

...

Valene

5 months ago

Okay, let me break this down. The key details are that the attacker inserted a different account number, which suggests they were able to tamper with the communication. I think the man-in-the-middle attack is the most likely answer here.

upvoted 0 times

...

Yolande

5 months ago

Hmm, I'm a bit confused here. Could it also be a DNS poisoning attack, where the attacker redirects the communication to a malicious server? I'll need to think this through carefully.

upvoted 0 times

...

Jess

5 months ago

This seems like a classic man-in-the-middle attack, where the attacker intercepts the communication and modifies the transaction details. I'm pretty confident this is the right answer.

upvoted 0 times

...

Bronwyn

1 year ago

The Man-in-the-Middle attack is the way to go here. Intercepting the communication and changing the account number? That's some next-level stuff. I bet the bank's IT team is scratching their heads on this one.

upvoted 0 times

...

Ben

1 year ago

Haha, looks like someone's been watching too many spy movies! A Man-in-the-Middle attack, really? I guess the bank needs to beef up their security. Or maybe they just need to hire better hackers to guard against this kind of thing.

upvoted 0 times

Pamella

12 months ago

Yeah, the bank definitely needs to step up their security game.

upvoted 0 times

...

Ivory

1 year ago

I know right, it sounds like something out of a movie!

upvoted 0 times

...

Junita

1 year ago

I believe it's DNS Poisoning, as the attacker manipulated the communication between Arman and the bank server.

upvoted 0 times

...

Jamal

1 year ago

This is clearly a Man-in-the-Middle attack. The attacker snuck into the communication channel and altered the payment details. That's a bold move, but I wouldn't try that at home, folks!

upvoted 0 times

Marguerita

1 year ago

I always make sure to double-check all my online transactions now.

upvoted 0 times

...

Omer

1 year ago

Yeah, it's scary how sophisticated these cyber attacks can be.

upvoted 0 times

...

Hermila

1 year ago

That's crazy! I can't believe someone would go to such lengths to steal money.

upvoted 0 times

...

Lettie

1 year ago

I agree with Sommer, it makes sense because someone intercepted the communication.

upvoted 0 times

...

Kenny

1 year ago

Ah, the classic Man-in-the-Middle attack. Classic move to intercept the communication and change the account number. Should have used a secure connection, Arman!

upvoted 0 times