which of the following attacks takes best advantage of an existing authenticated connection