Eccouncil ECSS Exam - Topic 4 Question 81 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 81
Topic #: 4

Stephen, an attacker, decided to gain access to an organization's server. He identified a user with access to the remote server. He used sniffing programs to gain the user's credentials and captured the authentication tokens transmitted by the user. Then, he transmitted the captured tokens back to the server to gain unauthorized access.

Identify the technique used by Stephen to gain unauthorized access to the target server.

ABrute-force attack

BInternal monologue

CSQL injection

DReplay attack

Show Suggested Answer

Suggested Answer: B

by Denny at May 12, 2024, 09:46 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barney

6 months ago

Sniffing credentials is classic replay attack stuff!

upvoted 0 times

...

Gilbert

6 months ago

Wait, are we sure it’s not an SQL injection?

upvoted 0 times

...

Jolene

6 months ago

Totally a replay attack, no doubt about it!

upvoted 0 times

...

Coral

7 months ago

I thought it was more like a brute-force attack.

upvoted 0 times

...

Lilli

7 months ago

That's definitely a replay attack!

upvoted 0 times

...

Angella

7 months ago

I thought brute-force attacks were more about guessing passwords, so I don't think that's the right answer here.

upvoted 0 times

...

Malcolm

7 months ago

This sounds similar to a practice question we did on token theft, which I think falls under replay attacks too.

upvoted 0 times

...

Tuyet

7 months ago

I'm not entirely sure, but I remember something about replay attacks involving the reuse of credentials.

upvoted 0 times

...

Chaya

8 months ago

I think this is a replay attack since Stephen captured the authentication tokens and reused them.

upvoted 0 times

...

Kenneth

8 months ago

Replay attack, for sure. The attacker captured the user's authentication tokens and then reused them to gain unauthorized access. That's a classic replay attack. I'm feeling pretty good about this one.

upvoted 0 times

...

Helga

8 months ago

This is a tricky one. The question provides a lot of details, but I'm a bit confused about the exact technique being used. I'll need to carefully review the options and the information given to make sure I select the right answer.

upvoted 0 times

...

Carlene

8 months ago

Okay, let me break this down step-by-step. The attacker used sniffing programs to gain the user's credentials and then transmitted the captured tokens back to the server. That sounds like a replay attack to me. I'm going to go with option D.

upvoted 0 times

...

Lucina

8 months ago

Hmm, I'm not entirely sure about this one. The question mentions sniffing programs and captured authentication tokens, so it could be a replay attack, but I'm also wondering if it could be something like a brute-force attack. I'll need to think this through a bit more.

upvoted 0 times

...

Meaghan

8 months ago

This seems like a classic replay attack scenario. I'm pretty confident that's the right answer here.

upvoted 0 times

...

Adria

8 months ago

I'm pretty sure EFI stands for Extensible Firmware Interface, so I'll go with option A.

upvoted 0 times

...

Eva

8 months ago

Hmm, I'm a little unsure about the differences between the captain's responsibilities. I'll need to review my notes on SHC architecture to make sure I understand which tasks the captain is responsible for.

upvoted 0 times

...

Cecil

8 months ago

Okay, I think I've got this. QI emphasizes peer review, while QA is more focused on the customer. That's the key distinction I need to remember.

upvoted 0 times

...

Alesia

1 year ago

Haha, replay attack all the way! Stephen's probably got a trophy case full of these kinds of tricks. I wonder if he has a 'Unauthorized Access Hall of Fame' or something.

upvoted 0 times

Ronnie

11 months ago

Haha, replay attack all the way! Stephen's probably got a trophy case full of these kinds of tricks. I wonder if he has a 'Unauthorized Access Hall of Fame' or something.

upvoted 0 times

...