What type of attack involves repeating a previously captured user response?

• A. Replay attack
• B. Phishing attack
• C. Sniffing attack
• D. Credential stuffing

Answer: (A)

In the context of cybersecurity, a replay attack specifically refers to a method where an attacker captures data transmission, such as a user's authentication response, and then reuses that data to gain unauthorized access or perform actions as if they were the legitimate user. This can involve intercepting network packets or data, storing them, and then resending them at a later time to exploit a system that does not adequately differentiate between valid and invalid requests.

This type of attack exploits the lack of session management or proper authentication mechanisms, allowing the attacker to impersonate the original user without needing to reauthenticate. It is particularly concerning in scenarios where sensitive transactions are involved, as it can bypass essential security measures.

In contrast, other types of attacks mentioned do not involve this specific technique of simply reusing previously captured information. Phishing attacks focus on tricking individuals into revealing sensitive information, sniffing attacks involve intercepting and analyzing traffic, while credential stuffing relies on using stolen credentials from one breach to access accounts on other platforms. Each of these poses significant risks but operates on different principles than a replay attack.