N10-009 CompTIA Network+

An on-path attack (formerly known as a man-in-the-middle (MITM) attack) involves intercepting and
potentially altering communications between two parties without their knowledge. This can be done
via techniques like ARP poisoning, rogue access points, or SSL stripping.
Breakdown of Options:
A . Self-signed certificate – These are untrusted SSL certificates but do not intercept traffic.
B . VLAN hopping – VLAN hopping exploits VLAN misconfigurations but does not necessarily intercept
communications.
C . On-path attack – Correct answer. This intercepts and modifies traffic between two endpoints.
D . Phishing – Phishing tricks users into revealing credentials rather than intercepting network traffic.
Reference:
CompTIA Network+ (N10-009) Official Study Guide – Domain 3.2: Explain common security concepts.
NIST SP 800-115: Guide to Security Testing and Assessments

Nmap (Network Mapper) is a powerful network scanning tool used to discover hosts and services on
a computer network. It can be used to identify which ports are open on a remote server, which can
help diagnose access issues to services like a remote file server.
Port Scanning: Nmap can perform comprehensive port scans to determine which ports are open and
what services are running on those ports.
Network Discovery: It provides detailed information about the host’s operating system, service
versions, and network configuration.
Security Audits: Besides troubleshooting, Nmap is also used for security auditing and identifying
potential vulnerabilities.
Network Reference:
CompTIA Network+ N10-007 Official Certification Guide: Covers network scanning tools and their
uses.
Nmap Documentation: Official documentation provides extensive details on how to use Nmap for
port scanning and network diagnostics.
Network+ Certification All-in-One Exam Guide: Discusses various network utilities, including Nmap,

and their applications in network troubleshooting.