Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which Wi-Fi attack intercepts the victim's web traffic, redirects the victim's browser to a web server that it controls, and serves up whatever content the attacker desires?

1. Evil Twin

2. SSLstrip

3. Emotet

4. Jasager

The correct answer is: SSLstrip

The attack that intercepts the victim's web traffic, redirects their browser to a web server controlled by the attacker, and serves content as desired is known as SSLstrip. This technique specifically targets HTTPS communications by downgrading the secure connection to an unencrypted HTTP connection. When a victim is led to a fake web server, their data can be captured and manipulated since the attacker can present any content on that server, including forms that resemble legitimate sites. Moreover, SSLstrip highlights a significant vulnerability in how users interact with HTTPS, as many people may not notice the absence of a secure connection. This allows attackers to harvest sensitive information such as login credentials or private data without the victim's knowledge while providing a seemingly normal web experience. The other attacks mentioned, such as Evil Twin and Jasager, involve creating rogue access points to intercept data but do not specifically detail the manipulation of web content in the same manner as SSLstrip, which is focused on the downgrade attack trickery related to secure connections. Emotet, on the other hand, is primarily a type of malware designed for stealing data and facilitating other attacks rather than engaging directly in the interception and manipulation of web traffic.