Free Preparation Discussions
MENU
GAQM CPEH-001 Exam - Topic 7 Question 33 Discussion
Topic #: 7
Bob, an Administrator at XYZ was furious when he discovered that his buddy Trent, has launched a session hijack attack against his network, and sniffed on his communication, including administrative tasks suck as configuring routers, firewalls, IDS, via Telnet. Bob, being an unhappy administrator, seeks your help to assist him in ensuring that attackers such as Trent will not be able to launch a session hijack in XYZ. Based on the above scenario, please choose which would be your corrective measurement actions. (Choose two)
First you should encrypt the data passed between the parties; in particular the session key. This technique is widely relied-upon by web-based banks and other e-commerce services, because it completely prevents sniffing-style attacks. However, it could still be possible to perform some other kind of session hijack. By configuring the appropriate spoof rules you prevent the attacker from using the same IP address as the victim as thus you can implement secondary check to see that the IP does not change in the middle of the session.
Jonell
10 months agoClorinda
10 months agoQuentin
10 months agoRegenia
11 months agoBethanie
11 months agoReena
11 months agoCallie
11 months agoLanie
11 months agoRolland
11 months agoCasie
11 months agoElvera
11 months agoMarlon
11 months agoSantos
11 months agoEnola
11 months ago