1. What is the main takeaway of the lab regarding HTTP vs HTTPS and MITM?

HTTP sends data in clear text that anyone on-path can read; HTTPS encrypts data so encryption prevents eavesdropping; MITM relies on weak or unencrypted channels.HTTP and HTTPS are equally secure.MITM only affects HTTPS.Encryption is unnecessary on trusted networks.

2. What is an evil twin in Wi‑Fi attacks?

A fake access point with the same name (SSID) as a legitimate one to capture victim traffic.A second router for backup.A type of WPA3 encryption.A tool used only for legal penetration testing.

3. Why do modern browsers force or strongly encourage HTTPS?

To protect users from MITM and eavesdropping by encrypting traffic and verifying server identity.To make pages load slower.To block all HTTP sites.To capture more user data.

4. Which port is commonly associated with unencrypted HTTP?

Port 80Port 443Port 22Port 21

5. MITM works best on which type of channels?

Unencrypted or weakly protected channels (e.g. HTTP, Telnet, FTP).Only on HTTPS and TLS channels.Only on wired Ethernet networks.Channels that use VPN.

Threat Landscape Overview : MITM

1. What is the main takeaway of the lab regarding HTTP vs HTTPS and MITM?

2. What is an evil twin in Wi‑Fi attacks?

3. Why do modern browsers force or strongly encourage HTTPS?

4. Which port is commonly associated with unencrypted HTTP?

5. MITM works best on which type of channels?