MENU
Attacker uses vulnerabilities in the authentication or session management functions such as exposed accounts, session IDs, logout, password management, timeouts, remember me. secret question, account update etc. to impersonate users, if a user simply closes the browser without logging out from sites accessed through a public computer, attacker can use the same browser later and exploit the user's privileges. Which of the following vulnerability/exploitation is referred above?
Suggested Answer: A
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
LE
Leigha
12 months ago
Are we sure this is a common issue? Seems exaggerated.
AL
Alfreda
12 months ago
It's all about session management, folks!
CA
Casey
12 months ago
I thought closing the browser would be enough?
SH
Shayne
1 year ago
Definitely a risk if you forget to log out!
DO
Donette
1 year ago
Sounds like classic session hijacking to me.
KA
Kati
1 year ago
I definitely remember that session IDs can be exploited, especially if they're not handled properly. This might be the right choice.
SI
Simona
1 year ago
I feel like the answer might be Timeout Exploitation since it mentions closing the browser, but I could be mixing it up with another concept.
MY
Myong
1 year ago
I remember practicing a question about session fixation attacks, and this seems similar, but I can't recall the exact term.
NA
Nancey
1 year ago
I think this is related to session management, but I'm not entirely sure if it's specifically about session IDs in URLs or something else.
HA
Hayley
1 year ago
I've got a good feeling about this one. Encryption is the obvious choice to pair with data fragmentation for enhanced security. The other options don't seem as relevant.
GL
Glynda
1 year ago
The audit policy file looks a bit complex, but I think I can figure it out. I'll start by adding the rules for the specific resources and namespaces mentioned in the question.
AN
Antonio
1 year ago
Okay, the Network layer is where routing occurs. I'm confident in that answer.
SU
Suzan
1 year ago
I bet the answer is B) Timeout Exploitation. It's like leaving your car unlocked in a bad neighborhood - the attacker just strolls in and takes over your account. Classic!
FE
Felix
1 year ago
C) I/O exploitation
ST
Stephane
1 year ago
B) Timeout Exploitation
GA
Galen
1 year ago
A) Session ID in URLs
NA
Nan
1 year ago
User 3: Definitely a risky move to not log out properly.
RE
Ressie
1 year ago
User 2: Yeah, it's like leaving the door wide open for attackers.
AR
Arlen
1 year ago
User 1: I think the answer is B) Timeout Exploitation.
ST
Starr
2 years ago
This is a tricky one. The question covers a lot of ground, but I'm going to have to go with D) Password Exploitation. Exposed accounts and weak password management can really open the door for impersonation attacks.
MA
Mariann
1 year ago
D) Password Exploitation
JA
Jacqueline
1 year ago
C) I/O exploitation
KA
Kallie
1 year ago
B) Timeout Exploitation
ME
Melina
1 year ago
A) Session ID in URLs
GE
Gertude
1 year ago
D) Password Exploitation
NU
Nu
1 year ago
C) I/O exploitation
VE
Veronique
1 year ago
B) Timeout Exploitation
MA
Maybelle
1 year ago
A) Session ID in URLs
MI
Mitsue
2 years ago
Hmm, I'm not sure. The question mentions a lot of different vulnerabilities, but I think the one being referred to is A) Session ID in URLs. That's a pretty sneaky way for an attacker to impersonate a user.
DU
Dusti
1 year ago
Yeah, it's important to always log out of public computers to prevent unauthorized access.
JI
Jin
1 year ago
I think you're right, Session ID in URLs can definitely be exploited by attackers.
MA
Mari
2 years ago
Ah, this is a classic case of session management vulnerabilities. I'd say the answer is B) Timeout Exploitation. Leaving the browser open without logging out is a common mistake that can leave users vulnerable.
DE
Derrick
1 year ago
Password exploitation is another common method used by attackers to impersonate users.
LA
Lamonica
1 year ago
Session ID in URLs can also be a vulnerability if not handled properly.
TA
Tamekia
1 year ago
It's important to always log out of public computers to prevent unauthorized access.
RO
Rodolfo
2 years ago
Yes, you're right. Timeout exploitation is a major risk when users don't log out.
EV
Evette
2 years ago
I believe Timeout Exploitation is also a potential vulnerability, as not setting proper timeouts can leave a user's session open for exploitation.
JA
Jaime
2 years ago
I agree with Kip, because if the session ID is exposed, an attacker can easily impersonate users.
KI
Kip
2 years ago
I think the vulnerability/exploitation referred above is Session ID in URLs.