Attacking Encrypted Traffic GMOB Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A mobile app development team wants to prevent man-in-the-middle attacks against their app's API traffic. They are considering certificate pinning. The app currently uses standard HTTPS with a public CA-issued certificate. Which approach provides the strongest protection against a rogue CA issuing a certificate for their domain, while still allowing certificate rotation?

   • ADisable certificate validation and rely on the app's own encryption layer.
   • BPin to the public key of the leaf certificate and implement a backup pin for the next key.
   • CPin to the root CA certificate only.
   • DPin to the exact certificate serial number of the current leaf certificate.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team wants to detect SSL stripping attacks on their corporate network. They have deployed a network monitoring solution that can inspect TLS handshakes. Which of the following indicators would be the strongest sign of an SSL stripping attack?

   • AA decrease in the average TLS version negotiated by clients.
   • BA sudden increase in TLS handshake failures with certificate errors.
   • CA high volume of HTTP requests to sites that normally use HTTPS, especially when the HTTP responses contain redirects to HTTPS.
   • DAn increase in DNS queries for domains that are known to be malicious.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is testing a public Wi-Fi hotspot. The analyst wants to demonstrate how an attacker could capture login credentials from users of a mobile web app that supports both HTTP and HTTPS. The analyst sets up a rogue access point and a proxy. Which technique would be most effective for this demonstration?

   • ASSL stripping using a tool like sslstrip
   • BInstalling a rogue CA certificate on the user's device
   • CForcing the use of TLS 1.0
   • DARP spoofing to redirect traffic to the proxy
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An attacker on the same local network sends forged ARP replies to associate the attacker's MAC address with the default gateway's IP address. What is the primary purpose of this technique in the context of attacking encrypted traffic?

   • ATo change the DNS server settings on the victim's device.
   • BTo force the victim to use a weaker encryption protocol.
   • CTo cause a denial of service by flooding the network with ARP packets.
   • DTo redirect traffic through the attacker's device so it can be intercepted and potentially decrypted.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a common defense against downgrade attacks in TLS?

   • AEnabling TLS session resumption.
   • BUsing a longer certificate key length.
   • CImplementing certificate pinning in the client.
   • DDisabling support for older protocol versions like SSL 3.0 and TLS 1.0 on the server.
   Reveal Solution Discussion Select an answer first