CompTIA CASP+ Practice Test

Which type of attack involves an unauthorized device impersonating a legitimate user?

1. Replay attack

2. IP Spoofing

3. Phishing

4. Cross-Site Scripting

The correct answer is: IP Spoofing

The scenario described in the question pertains to an unauthorized device impersonating a legitimate user. This action is characteristic of IP Spoofing, where an attacker sends packets from a false (or "spoofed") IP address to trick the network into believing that the packets are coming from a legitimate and trusted source. This can enable the attacker to bypass security measures, gain access to sensitive data, or conduct further attacks under the guise of a valid user. In this context, it is crucial to understand that IP Spoofing specifically relates to manipulating IP packets to mislead the recipient about the origin of the data, effectively allowing an unauthorized device to masquerade as someone trusted on the network. This is different from other types of attacks listed in the choices. For example, a replay attack involves intercepting and re-sending legitimate communications but does not necessarily involve impersonating a user by spoofing an IP address. Phishing typically involves tricking users into providing sensitive information by pretending to be a trustworthy entity, often through emails or websites, rather than manipulating an IP address. Cross-Site Scripting (XSS) exploits vulnerabilities in web applications to inject malicious scripts, which is also distinct from impersonating users based on IP addresses. Understanding these distinctions emphasizes the