ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 366 - SY0-601 discussion

Report
Export

A security analyst is investigating network issues between a workstation and a company server. The workstation and server occasionally experience service disruptions, and employees are forced to reconnect to the server. In addition, some reports indicate sensitive information is being leaked from the server to the public.

The workstation IP address is 192.168.1.103, and the server IP address is 192.168.1.101. The analyst runs arp -a On a separate workstation and obtains the following results:

Which of the following is most likely occurring?

A.
Evil twin attack
Answers
A.
Evil twin attack
B.
Domain hijacking attack
Answers
B.
Domain hijacking attack
C.
On-path attack
Answers
C.
On-path attack
D.
MAC flooding attack
Answers
D.
MAC flooding attack
Suggested answer: C

Explanation:

An on-path attack is a type of attack where an attacker places themselves between two devices (such as a workstation and a server) and intercepts or modifies the communications between them. An on- path attacker can collect sensitive information, impersonate either device, or disrupt the service. In this scenario, the attacker is likely using an on-path attack to capture and alter the network traffic between the workstation and the server, causing service disruptions and data leakage.

asked 02/10/2024
Harri Jaakkonen
46 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first