Which Security Procedure item counters Man-in-the-Middle attacks?

Which Security Procedure item counters Man-in-the-Middle attacks?

• A. End-to-End Access Control
• B. Traffic Analysis
• C. Think like an adversary
• D. Privileges Assignment

Answer: (A)

Defending against Man-in-the-Middle hinges on making the communication between endpoints secure and verifiable from end to end. End-to-End Access Control ensures that only legitimate endpoints can establish a session and that the data traveling between them is protected throughout the entire path. With proper authentication and encryption from source to destination, an interceptor cannot decrypt the content, cannot alter it without detection, and cannot impersonate a party in the conversation. In practice, this means using strong mutual authentication and end-to-end encryption so the channel remains confidential and integral regardless of where the data travels. Traffic analysis looks at who is talking to whom and when, but it doesn’t stop someone from intercepting and seeing or tampering with the content. Thinking like an adversary is a mindset for testing and discovery, not a concrete control. Privileges assignment governs what a user is allowed to do, not how the data is protected in transit. End-to-End Access Control directly addresses the protection of the data itself across the entire communication path, which is what counters MITM attacks.

Defending against Man-in-the-Middle hinges on making the communication between endpoints secure and verifiable from end to end. End-to-End Access Control ensures that only legitimate endpoints can establish a session and that the data traveling between them is protected throughout the entire path. With proper authentication and encryption from source to destination, an interceptor cannot decrypt the content, cannot alter it without detection, and cannot impersonate a party in the conversation. In practice, this means using strong mutual authentication and end-to-end encryption so the channel remains confidential and integral regardless of where the data travels.

Traffic analysis looks at who is talking to whom and when, but it doesn’t stop someone from intercepting and seeing or tampering with the content. Thinking like an adversary is a mindset for testing and discovery, not a concrete control. Privileges assignment governs what a user is allowed to do, not how the data is protected in transit. End-to-End Access Control directly addresses the protection of the data itself across the entire communication path, which is what counters MITM attacks.