CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: A - A man-in-the-middle attack is a form of active eavesdropping attack that attempts to fool both ends of a communications session into believing the system in the middle is the other end.

Key Takeaway: A man-in-the-middle attack is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them. Both parties involved in communication are made to believe that they are communicating with each other. In reality the entire conversation is controlled by the attacker. These attacks are successful only when the attacker can impersonate each endpoint to the satisfaction of the other.