CompTIA CySA+ (CS0-001) — Question 257

A technician recently fixed a computer with several viruses and spyware programs on it and notices the Internet settings were set to redirect all traffic through an unknown proxy. This type of attack is known as which of the following?

Answer options

• A. Phishing
• B. Social engineering
• C. Man-in-the-middle
• D. Shoulder surfing

Correct answer: C

Explanation

The correct answer is C, Man-in-the-middle, which describes an attack where the attacker intercepts communication between two parties, often by using a proxy. Phishing (A) involves tricking users into revealing sensitive information, Social engineering (B) manipulates individuals into breaking security protocols, and Shoulder surfing (D) refers to observing someone’s screen or input without their knowledge, none of which apply to the scenario described.