What is the term for intercepting or altering communications between two parties using ARP spoofing or rogue APs?

• A. Man-in-the-Middle Attacks
• B. DNS Spoofing
• C. Phishing
• D. Denial of Service

Answer: (A)

Man-in-the-Middle attacks involve intercepting or altering communications between two parties. By using ARP spoofing, an attacker poisons the ARP cache so traffic intended for the gateway or another host is sent to the attacker’s device, placing the attacker in the middle. A rogue access point creates a trusted-looking network controlled by the attacker; victims connect and all traffic passes through the attacker, who can eavesdrop or modify it. These techniques together establish a position between the communicating devices, enabling credential theft, data tampering, or session hijacking.

DNS spoofing manipulates DNS responses to redirect connections to a malicious host, which is about misdirection rather than sitting in the traffic path. Phishing is social engineering to obtain credentials. Denial of Service aims to disrupt availability rather than intercept traffic. For defense, use end-to-end encryption like TLS, VPNs, and protections such as ARP inspection or dynamic ARP protection on network devices.