Exam CISA topic 1 question 500 discussion

Answer is A. Directly related to firewall. Sniffing packets is not and more related to the protocols being used rather than the firewall itself.

The option B describes a different type of attack known as packet sniffing or eavesdropping. While packet sniffing can pose a security risk, it typically bypasses the firewall altogether and relies on vulnerabilities in network protocols or encryption mechanisms rather than exploiting weaknesses in the firewall itself. Therefore, option A is the attack technique that will succeed because of an inherent security weakness in an Internet firewall.

Q: attack TECHNIQUES will succeed because of an INHERENT security weakness in an Internet FIREWALL Answer: B directly exploits weaknesses in the firewall's configuration or implementation, allowing attackers to eavesdrop on network traffic passing through the firewall. option A DoS attack, potentially exploit weaknesses in network infrastructure, it's not directly related to inherent security weaknesses in a firewall. option C phishing attack can bypass firewalls if conducted via email or other communication channels, they don't necessarily exploit inherent weaknesses in the firewall itself.

Cant it be Phishing???

It makes me confusing between a and b...

B. Intercepting packets and viewing passwords