Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two. What would you call this attack?
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
EL
Elin
12 months ago
I thought Dsniff was just for sniffing packets, not relaying!
LE
Leonie
12 months ago
Poisoning Attack sounds a bit off for this scenario.
GO
Goldie
12 months ago
Wait, are we sure it's not ARP Proxy?
MA
Magnolia
1 year ago
Totally agree, it's classic MITM.
KA
Kate
1 year ago
That's definitely a Man-in-the-middle attack.
GE
German
1 year ago
I feel like I've seen something similar before, but I can't recall if it was specifically called a Poisoning Attack or something else.
RO
Rodrigo
1 year ago
This scenario definitely resembles a practice question we did on interception techniques. I think the answer is B, Man-in-the-middle.
RE
Rebbecca
1 year ago
I'm not entirely sure, but I think it could also be related to ARP Proxy. I need to double-check that.
IS
Isaiah
1 year ago
I remember studying about different types of attacks, and this sounds a lot like a Man-in-the-middle attack.
ET
Ethan
1 year ago
Okay, I've got a strategy for this. The key is to identify the enterprise role that is focused on aligning IT/technology decisions with the overall business strategy and keeping leadership informed. I think I know the right answer, but I'll double-check my reasoning.
FL
Florinda
1 year ago
I think the Application Insights Connector might be the way to go here. It's designed for monitoring and alerting on application issues, which sounds like what we need to trigger the ServiceNow ticket. But I'm not 100% certain, so I'll review the other options as well.
CA
Carla
1 year ago
I think it might be about reassurance messages? There was a similar question about providing information during a call.
DO
Dottie
1 year ago
Okay, I've got a strategy here. The question is asking about the storage management portal, so I need to focus on the management features rather than the underlying storage types. "All types of cloud storage devices" seems like the most comprehensive answer.
AN
Annabelle
1 year ago
I'm going with B) Man-in-the-middle. Eric's basically the third wheel in this scenario, except he's not bringing snacks, he's just stealing everyone's login credentials. Smooth move, Eric.
MA
Marsha
1 year ago
It's a classic attack where the attacker secretly intercepts and possibly alters the communication between two parties.
BE
Beckie
1 year ago
I agree, he's like a silent observer relaying information without anyone noticing.
MA
Marcos
1 year ago
Yeah, definitely B) Man-in-the-middle. Eric is sneaky intercepting those communications.
WI
Wilson
1 year ago
B) Man-in-the-middle is the way to go. Eric's using those Dsniff tools like a ninja, sneaking in between the two entities and intercepting their communications. It's like he's the middleman at a secret spy meeting.
JA
Javier
1 year ago
I'm going with B) Man-in-the-middle as well. I mean, it's like Eric is the bouncer at a party, checking everyone's credentials and then letting them in. Except, you know, without the party and with a lot more hacking involved.
TA
Tammara
2 years ago
Definitely B) Man-in-the-middle. Eric is essentially inserting himself into the communication channel and acting as a proxy between the two parties. This is textbook MITM.
FE
Felix
1 year ago
D) Poisoning Attack
KA
Katheryn
1 year ago
C) ARP Proxy
GE
Gerardo
1 year ago
B) Man-in-the-middle
AN
Annamaria
1 year ago
A) Interceptor
TR
Trina
1 year ago
D) Poisoning Attack
BE
Bette
1 year ago
C) ARP Proxy
HI
Hillary
1 year ago
B) Man-in-the-middle
LO
Lorrie
1 year ago
A) Interceptor
BR
Brock
2 years ago
I think the correct answer is B) Man-in-the-middle. Eric is intercepting and relaying the communication between the two entities without their knowledge, which is a classic man-in-the-middle attack.
CA
Carmela
1 year ago
B) Man-in-the-middle
KE
Kenda
1 year ago
A) Interceptor
JO
Jody
2 years ago
I agree with Anisha, it's definitely B) Man-in-the-middle. Eric is in the middle of the communication, manipulating the data.
AN
Anisha
2 years ago
I think it's B) Man-in-the-middle because Eric is intercepting communications without the two entities knowing.
EL
Elza
2 years ago
B) Man-in-the-middle