lab 28

Question 1

When the Burp Suite’s Intercept function is turned off, what is the tool doing?

Session hijacking
AitM sniffing
Credential cracking
Cookie theft
Session ID abuse

Answer 1

AitM sniffing

Question 2

What was the purpose of changing the proxy settings on the victim?

To prevent encryption negotiation
To route traffic to the attacker’s system
To disable the firewall
To enable DNS resolution

Answer 2

To route traffic to the attacker’s system

Question 3

What would stop the victim’s credentials from being stolen in the AitM attack? (select two)

SPAM filter
Encrypted protocols
Firewall
Not trusting unsolicited instructions
Intrusion detection system

Answer 3

Encrypted protocols
Not trusting unsolicited instructions

Question 4

What is the HTTP method of communication that contained the victim’s credentials in the AitM attack?

GET
HEAD
PUT
POST

Answer 4

POST

Question 5

Which of the following concepts should be added to the user training at the organization to avoid this type of scam in the future?

Do not execute scripts offered via email

Do not use company credentials anywhere other than valid internal systems
Log out of system when not in use

Be cautious about instructions provided over the phone

Do not share your credentials with others

Answer 5

Do not execute scripts offered via email

Do not use company credentials anywhere other than valid internal systems