What is Man-in-the-middle attack?
In short
In a man-in-the-middle attack, an attacker secretly intercepts, and may alter, communications between two parties who believe they are talking directly to each other, for example on an unsecured public network.
Key takeaways
- Encryption with properly verified certificates is the main defense.
- Virtual private networks protect traffic on untrusted networks.
- Multi-factor authentication limits the value of intercepted passwords.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?