An on-path attack (previously known as MITM – Man-in-the-Middle) allows an attacker to intercept and modify communication between two parties.
ARP poisoning (Option B):
Attackers send fake ARP replies to associate their MAC address with the IP address of a legitimate device (e.g., gateway).
This forces traffic to flow through the attacker ' s system, enabling packet capture and manipulation.
Tools like Ettercap, Bettercap, and ARP spoofing scripts are commonly used.
[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "On-Path Attacks and ARP Poisoning", Incorrect options:, Option A (DNS spoofing): Redirects users to malicious domains but does not intercept traffic., Option C (VLAN hopping): Allows traffic to traverse VLANs, but does not intercept user communication., Option D (SYN flooding): A DoS attack that overwhelms a target with half-open connections, but does not intercept traffic., , , , ]
Submit