GIAC Foundational Cybersecurity Technologies Practice Test

Which type of attack involves intercepting the communication between two parties?

1. Denial of Service

2. Man-in-the-Middle

3. Phishing

4. SQL Injection

The correct answer is: Man-in-the-Middle

The Man-in-the-Middle attack is characterized by an attacker intercepting and possibly altering the communication between two parties without their knowledge. This type of attack allows the malicious actor to eavesdrop on the conversation, gather sensitive information, or even manipulate the messages being exchanged to mislead one or both parties. In a typical scenario, the attacker positions themselves between two users, often exploiting weaknesses in network security or using malicious software. For instance, this can occur on unsecured Wi-Fi networks where the attacker can capture and relay communications, making it seem as though the two parties are communicating directly with each other. Other types of attacks listed, such as Denial of Service, primarily aim to disrupt services rather than directly intercept communications. Phishing targets victims to retrieve information through deceptive means, generally without intercepting ongoing communications. SQL Injection attacks focus on exploiting vulnerabilities in a database using malicious SQL queries, not on intercepting messages between users. Hence, the characteristics and implications of a Man-in-the-Middle attack distinctly identify it as the relevant type of attack in the context of intercepting communication.