Which attack involves a compromise of data that occurs between two end points?

Question:
Which attack involves a compromise of data that occurs between two end points?

• denial-of-service
• man-in-the-middle attack
• extraction of security parameters
• username enumeration

Explanation: Threat actors frequently attempt to access devices over the internet through communication protocols. Some of the most popular remote exploits are as follows:

• Man-In-the-middle attack (MITM) – The threat actor gets between devices in the system and intercepts all of the data being transmitted. This information could simply be collected or modified for a specific purpose and delivered to its original destination.
• Eavesdropping attack – When devices are being installed, the threat actor can intercept data such as security keys that are used by constrained devices to establish communications once they are up and running.
• SQL injection (SQLi) – Threat actors uses a flaw in the Structured Query Language (SQL) application that allows them to have access to modify the data or gain administrative privileges.
• Routing attack – A threat actor could either place a rogue routing device on the network or modify routing packets to manipulate routers to send all packets to the chosen destination of the threat actor. The threat actor could then drop specific packets, known as selective forwarding, or drop all packets, known as a sinkhole attack.

Exam with this question: Modules 16 – 17: Building and Securing a Small Network Exam Answers
Exam with this question: IoT Security 1.1 Chapter 5 Quiz Answers