Exam Pass Pro تحضير شامل لشهادات CIA & IAP — بنك أسئلة تفاعلي وملخصات رقمية آمنة
سؤال #31 CIA_Part3_349_MCQ_Arabic_SameStyle416_FullArabicOptions مهم ⭐ فتح الاختبار ↗
السؤال — عربي
: أي مما يلي يصف على أفضل وجه هجوم "رجل في المنتصف" (Man-in-the-Middle) السيبراني؟
Question — English
Which of the following best describes a man-in-the-middle cyber-attack?
الخيارات — عربي
A يكون المهاجم قادرًا على حذف البيانات الموجودة على الشبكة دون الوصول المادي إلى الجهاز.
B يكون المهاجم قادرًا على استغلال أنشطة الشبكة لأغراض غير معتمدة.
C يكون المهاجم قادرًا على السيطرة على اتصالات البيانات أثناء إرسالها واستبدال حركة المرور.
D يكون المهاجم قادرًا على تعطيل ضوابط الأمان الافتراضية وإدخال نقاط ضعف إضافية.
Options — English
A The perpetrator is able to delete data on the network without physical access to the device.
B The perpetrator is able to exploit network activities for unapproved purposes.
C The perpetrator is able to take over control of data communication in transit and replace traffic.
D The perpetrator is able to disable default security controls and introduce additional vulnerabilities
💡 1. A. The perpetrator is able to delete data on the network without physical access to the device. – ᤶ ᤷ Incorrect o This describes a type of data breach or remote attack, but it does not specifically relate to a man-in-the-middle (MITM) attack. o MITM attacks involve intercepting communication rather than simply deleting data. 2. B. The perpetrator is able to exploit network activities for unapproved purposes. – ᤶ ᤷ Incorrect o While MITM attacks can lead to exploitation, this description is too vague and could refer to many types of cyberattacks (e.g., malware, unauthorized access, privilege escalation). o MITM attacks specifically involve intercepting, altering, or relaying communications between two parties. 3. C. The perpetrator is able to take over control of data communication in transit and replace traffic. – ࿨ ࿩ ࿪ Correct Answer o This is the definition of a MITM attack, where an attacker intercepts and alters communications between two parties without their knowledge. o The attacker may eavesdrop, inject malicious data, or manipulate the conversation for financial fraud, identity theft, or other malicious activities. 4. D. The perpetrator is able to disable default security controls and introduce additional vulnerabilities. – ᤶ ᤷ Incorrect o This describes a type of privilege escalation or misconfiguration attack, but not a MITM attack. o MITM attacks focus on communication interception rather than directly modifying security settings.