Regarding MitM, which statement accurately describes a characteristic?

Regarding MitM, which statement accurately describes a characteristic?

• A. The attacker monitors data in transit without altering it.
• B. The attacker intercepts and controls the entire conversation.
• C. The attacker only forwards messages.
• D. The attacker uses social engineering.

Answer: (B)

A Man-in-the-Middle attack places the attacker between two communicating parties, allowing them to see and alter the traffic as it passes. Because the attacker can intercept the messages and control what is sent in return—potentially impersonating either side, reading sensitive data, and injecting or modifying content—the ability to intercept and control the entire conversation best captures the defining behavior. If the attacker only passive-listens, that’s just eavesdropping, not the full MitM picture. If they only forward messages, there’s no manipulation or impersonation. Social engineering might help set up such access, but it isn’t the characteristic that defines MitM itself.

A Man-in-the-Middle attack places the attacker between two communicating parties, allowing them to see and alter the traffic as it passes. Because the attacker can intercept the messages and control what is sent in return—potentially impersonating either side, reading sensitive data, and injecting or modifying content—the ability to intercept and control the entire conversation best captures the defining behavior. If the attacker only passive-listens, that’s just eavesdropping, not the full MitM picture. If they only forward messages, there’s no manipulation or impersonation. Social engineering might help set up such access, but it isn’t the characteristic that defines MitM itself.