Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
On-path attack (also known as Man-in-the-Middle or MitM attack): Occurs when an attacker intercepts and potentially alters communications between a user and a website. Public Wi-Fi is a common environment for these attacks, especially if the user ignores security warnings about insecure connections (e.g., untrusted SSL/TLS certificates). The attacker could have captured the user’s credit card information during the session.
on-path is the new man in the middle
On-path attack. Public Wi-Fi: Public Wi-Fi networks are often unsecured and can be easily compromised by attackers. Man-in-the-middle: An on-path attack involves an attacker intercepting communication between the user and the airline website, potentially capturing sensitive information like credit card details. Security warning: The ignored security warning likely indicated that the connection was not secure, making the user vulnerable to an on-path attack. Replay attacks, memory leaks, and buffer overflow attacks are less likely in this scenario. Replay attacks involve reusing captured data, but it's not clear how that would have led to unauthorized charges. Memory leaks and buffer overflow attacks are typically associated with software vulnerabilities, not network-based attacks.