GAQM Exam CFA-001 Topic 4 Question 58 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 58
Topic #: 4

Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?

ASession ID in URLs

BTimeout Exploitation

CI/O exploitation

DPassword Exploitation

Show Suggested Answer

Suggested Answer: A

by Lashandra at Dec 06, 2022, 01:44 PM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Suzan

3 months ago

I bet the answer is B) Timeout Exploitation. It's like leaving your car unlocked in a bad neighborhood - the attacker just strolls in and takes over your account. Classic!

upvoted 0 times

Felix

1 months ago

C) I/O exploitation

upvoted 0 times

...

Stephane

1 months ago

B) Timeout Exploitation

upvoted 0 times

...

Galen

2 months ago

A) Session ID in URLs

upvoted 0 times

...

Nan

2 months ago

User 3: Definitely a risky move to not log out properly.

upvoted 0 times

...

Ressie

2 months ago

User 2: Yeah, it's like leaving the door wide open for attackers.

upvoted 0 times

...

Arlen

2 months ago

User 1: I think the answer is B) Timeout Exploitation.

upvoted 0 times

...

Starr

3 months ago

This is a tricky one. The question covers a lot of ground, but I'm going to have to go with D) Password Exploitation. Exposed accounts and weak password management can really open the door for impersonation attacks.

upvoted 0 times

Mariann

30 days ago

D) Password Exploitation

upvoted 0 times

...

Jacqueline

1 months ago

C) I/O exploitation

upvoted 0 times

...

Kallie

1 months ago

B) Timeout Exploitation

upvoted 0 times

...

Melina

1 months ago

A) Session ID in URLs

upvoted 0 times

...

Gertude

2 months ago

D) Password Exploitation

upvoted 0 times

...

Nu

2 months ago

C) I/O exploitation

upvoted 0 times

...

Veronique

2 months ago

B) Timeout Exploitation

upvoted 0 times

...

Maybelle

3 months ago

A) Session ID in URLs

upvoted 0 times

...

Mitsue

3 months ago

Hmm, I'm not sure. The question mentions a lot of different vulnerabilities, but I think the one being referred to is A) Session ID in URLs. That's a pretty sneaky way for an attacker to impersonate a user.

upvoted 0 times

Dusti

2 months ago

Yeah, it's important to always log out of public computers to prevent unauthorized access.

upvoted 0 times

...

Jin

2 months ago

I think you're right, Session ID in URLs can definitely be exploited by attackers.

upvoted 0 times

...

Mari

3 months ago

Ah, this is a classic case of session management vulnerabilities. I'd say the answer is B) Timeout Exploitation. Leaving the browser open without logging out is a common mistake that can leave users vulnerable.

upvoted 0 times