ISC2 CC Network Security Practice Question
A security team is investigating a potential man-in-the-middle attack. Which TWO of the following are common techniques used in MITM attacks? (Select TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ARP poisoning
ARP poisoning redirects traffic, and rogue Wi-Fi access points intercept communications.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
ARP poisoning
Why this is correct
Poisoned ARP tables redirect traffic to the attacker.
- ✗
SYN flood
Why it's wrong here
SYN flood is a DoS attack.
- ✗
DNS amplification
Why it's wrong here
DNS amplification is a DDoS technique, not MITM.
- ✓
Setting up a rogue Wi-Fi access point
Why this is correct
A rogue AP can capture and modify traffic.
- ✗
ICMP flood
Why it's wrong here
ICMP flood is a DoS attack.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Man-in-the-middle attack
A cyberattack where an attacker secretly intercepts and potentially alters communication between two parties who believe they are directly communicating with each other.
Key term
ARP poisoning
ARP poisoning is a network attack where an attacker sends fake Address Resolution Protocol messages to link their MAC address with a legitimate IP address, enabling them to intercept, modify, or stop data on a local network.
About these practice questions
Courseiva writes every CC question from scratch — 976 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.