A penetration tester is performing an on-path attack on a network that uses unencrypted HTTP. The tester wants to capture credentials and also modify the data in transit. Which technique should the tester use?

ARP spoofing combined with a packet capture tool like Wireshark

VLAN hopping to gain access to the server's VLAN

MAC flooding to cause the switch to forward all traffic to the tester

DNS cache poisoning to redirect the victim to a fake website

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 6)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 26–27

26foundation · easy
Which technique is commonly used to redirect traffic through an attacker's system in an on-path attack on a local network?
Select an answer first
27application · medium
A penetration tester is performing an on-path attack on a network that uses unencrypted HTTP. The tester wants to capture credentials and also modify the data in transit. Which technique should the tester use?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Network Attacks PT0-003 Practice Questions (Page 6)

Questions 26–27

Which technique is commonly used to redirect traffic through an attacker's system in an on-path attack on a local network?

A penetration tester is performing an on-path attack on a network that uses unencrypted HTTP. The tester wants to capture credentials and also modify the data in transit. Which technique should the tester use?

Keep studying — Attacks and exploits