CompTIA CASP+ Practice Test

What type of attack occurs when a malicious actor intercepts communications between a user and a server?

1. DDoS attack

2. Man in the middle attack

3. Phishing attack

4. Brute force attack

The correct answer is: Man in the middle attack

The correct answer represents a Man-in-the-Middle (MitM) attack, which occurs when a malicious actor secretly intercepts and potentially alters communications between two parties without their knowledge. This type of attack typically targets the communication process, allowing the attacker to eavesdrop, capture sensitive data such as passwords or personal information, and even impersonate one or both parties involved in the communication. In a MitM attack, the attacker stands between the user and the server, which means they can manipulate the data being exchanged, inject malicious content, or redirect traffic to unauthorized endpoints. This type of attack can happen in various scenarios, such as insecure Wi-Fi networks, where an attacker might use tools to capture unencrypted traffic. Understanding this attack is crucial for implementing cybersecurity measures like encryption, secure communication protocols, and vigilant network monitoring. For context, other options like DDoS attacks involve overwhelming a target's resources to disrupt service rather than intercepting communications. Phishing attacks focus on tricking users into providing sensitive information by mimicking trustworthy entities, and brute force attacks aim to guess passwords through trial and error rather than intercepting ongoing communications. Each of these attack types has distinct characteristics and impacts compared to a Man-in-the-Middle attack.