MENU
Stephen, an attacker, decided to gain access to an organization's server. He identified a user with access to the remote server. He used sniffing programs to gain the user's credentials and captured the authentication tokens transmitted by the user. Then, he transmitted the captured tokens back to the server to gain unauthorized access.
Identify the technique used by Stephen to gain unauthorized access to the target server.
Suggested Answer: B
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
42 comments · newest first
BA
Barney
11 months ago
Sniffing credentials is classic replay attack stuff!
GI
Gilbert
11 months ago
Wait, are we sure it’s not an SQL injection?
JO
Jolene
11 months ago
Totally a replay attack, no doubt about it!
CO
Coral
12 months ago
I thought it was more like a brute-force attack.
LI
Lilli
12 months ago
That's definitely a replay attack!
AN
Angella
1 year ago
I thought brute-force attacks were more about guessing passwords, so I don't think that's the right answer here.
MA
Malcolm
1 year ago
This sounds similar to a practice question we did on token theft, which I think falls under replay attacks too.
TU
Tuyet
1 year ago
I'm not entirely sure, but I remember something about replay attacks involving the reuse of credentials.
CH
Chaya
1 year ago
I think this is a replay attack since Stephen captured the authentication tokens and reused them.
KE
Kenneth
1 year ago
Replay attack, for sure. The attacker captured the user's authentication tokens and then reused them to gain unauthorized access. That's a classic replay attack. I'm feeling pretty good about this one.
HE
Helga
1 year ago
This is a tricky one. The question provides a lot of details, but I'm a bit confused about the exact technique being used. I'll need to carefully review the options and the information given to make sure I select the right answer.
CA
Carlene
1 year ago
Okay, let me break this down step-by-step. The attacker used sniffing programs to gain the user's credentials and then transmitted the captured tokens back to the server. That sounds like a replay attack to me. I'm going to go with option D.
LU
Lucina
1 year ago
Hmm, I'm not entirely sure about this one. The question mentions sniffing programs and captured authentication tokens, so it could be a replay attack, but I'm also wondering if it could be something like a brute-force attack. I'll need to think this through a bit more.
ME
Meaghan
1 year ago
This seems like a classic replay attack scenario. I'm pretty confident that's the right answer here.
AD
Adria
1 year ago
I'm pretty sure EFI stands for Extensible Firmware Interface, so I'll go with option A.
EV
Eva
1 year ago
Hmm, I'm a little unsure about the differences between the captain's responsibilities. I'll need to review my notes on SHC architecture to make sure I understand which tasks the captain is responsible for.
CE
Cecil
1 year ago
Okay, I think I've got this. QI emphasizes peer review, while QA is more focused on the customer. That's the key distinction I need to remember.
AL
Alesia
1 year ago
Haha, replay attack all the way! Stephen's probably got a trophy case full of these kinds of tricks. I wonder if he has a 'Unauthorized Access Hall of Fame' or something.
RO
Ronnie
1 year ago
Haha, replay attack all the way! Stephen's probably got a trophy case full of these kinds of tricks. I wonder if he has a 'Unauthorized Access Hall of Fame' or something.
MA
Marcos
1 year ago
D) Replay attack
JA
Jacki
1 year ago
D) Replay attack
ED
Edelmira
1 year ago
C) SQL injection
CA
Carolann
1 year ago
B) Internal monologue
FR
Francesco
1 year ago
C) SQL injection
CH
Chaya
1 year ago
A) Brute-force attack
GR
Graham
1 year ago
B) Internal monologue
RO
Ronnie
1 year ago
A) Brute-force attack
DE
Delisa
2 years ago
Definitely a replay attack. Gotta hand it to Stephen, he really knows how to work the system. Bet he's high-fiving himself right about now.
JO
Josephine
1 year ago
Definitely a replay attack. Gotta hand it to Stephen, he really knows how to work the system. Bet he's high-fiving himself right about now.
LA
Lasandra
1 year ago
D) Replay attack
CO
Cordelia
1 year ago
C) SQL injection
MA
Marlon
1 year ago
B) Internal monologue
WE
Werner
1 year ago
A) Brute-force attack
KA
Kayleigh
2 years ago
Replay attack, for sure. Stephen really played his cards right, didn't he? I bet he's feeling pretty smug about that one.
SH
Sherell
1 year ago
D) Replay attack
LU
Luz
1 year ago
C) SQL injection
LI
Lisbeth
1 year ago
B) Internal monologue
AN
Annice
1 year ago
A) Brute-force attack
SO
Sophia
2 years ago
Wow, that's a classic replay attack! I can't believe Stephen was able to pull that off. Guess he's got some serious hacking skills, huh?
NI
Nickie
2 years ago
I'm not sure, but I think it could also be a brute-force attack.
SE
Selma
2 years ago
I agree with Doyle, replay attack makes sense in this scenario.
DO
Doyle
2 years ago
I think the technique used by Stephen is a replay attack.