CertNexus Exam ITS-110 Topic 7 Question 49 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 49
Topic #: 7

In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

AClient to server traffic must use Hypertext Transmission Protocol (HTTP)

BThe server must be vulnerable to malformed Uniform Resource Locator (URL) injection

CThe server must be using a deprecated version of Transport Layer Security (TLS)

DThe web server's X.509 certificate must be compromised

Show Suggested Answer

Suggested Answer: D

by Mozell at Dec 08, 2024, 01:50 PM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annice

2 months ago

Ah, the elusive MITM attack. The ultimate game of 'Simon Says' with the internet as the playground.

upvoted 0 times

Jutta

9 days ago

D) The web server's X.509 certificate must be compromised

upvoted 0 times

...

Jutta

14 days ago

C) The server must be using a deprecated version of Transport Layer Security (TLS)

upvoted 0 times

...

Jutta

1 months ago

A) Client to server traffic must use Hypertext Transmission Protocol (HTTP)

upvoted 0 times

...

Janna

2 months ago

Looks like the answer is C. Because who needs security these days, am I right? Just slap on a 'secure' label and call it a day.

upvoted 0 times

...

Nada

2 months ago

Hmm, let's see... Deprecated TLS version, you say? I bet the server is still using the ancient 'Handshake of the Dinosaurs' protocol.

upvoted 0 times

Bok

24 days ago

Definitely, that would make the MITM attack a walk in the park.

upvoted 0 times

...

Mari

1 months ago

So, compromising the X.509 certificate would be a piece of cake.

upvoted 0 times

...

Lindy

1 months ago

Yeah, if they're still using it, they're practically inviting attacks.

upvoted 0 times

...

Clay

2 months ago

I heard that ancient protocol is a goldmine for hackers.

upvoted 0 times

...

Providencia

2 months ago

A MITM attack against a secure website? That's like trying to sneak past a bouncer at a VIP club while wearing a neon sign that says 'I'm up to no good!'

upvoted 0 times

Derrick

29 days ago

B: D) The web server's X.509 certificate must be compromised

upvoted 0 times

...

Arlen

1 months ago

A: B) The server must be vulnerable to malformed Uniform Resource Locator (URL) injection

upvoted 0 times

...

Larae

2 months ago

But what about option C? If the server is using a deprecated version of TLS, wouldn't that also make it vulnerable to MITM attacks?

upvoted 0 times

...

Pauline

2 months ago

I agree with Glory, because without compromising the certificate, it would be difficult to intercept the traffic.

upvoted 0 times

...

Glory

3 months ago

I think the answer is D) The web server's X.509 certificate must be compromised.

upvoted 0 times

...