GIAC GCIH Exam - Topic 2 Question 38 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 38
Topic #: 2

[All GCIH Questions]

Which of the following can be used to perform session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

ACross-site scripting

BSession fixation

CARP spoofing

DSession sidejacking

Show Suggested Answer

Suggested Answer: C

by Melodie at Mar 08, 2025, 03:02 PM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Danilo

6 months ago

Session fixation is sneaky, but it works!

upvoted 0 times

...

Walker

6 months ago

Totally agree with A and B, but not sure about C.

upvoted 0 times

...

Coral

6 months ago

Wait, is D really a thing? Sounds kinda sketchy.

upvoted 0 times

...

Cristy

7 months ago

I think C is also a valid method.

upvoted 0 times

...

Genevive

7 months ago

Definitely A and B can be used for session hijacking.

upvoted 0 times

...

France

7 months ago

I feel like session sidejacking is a common term, but I’m not 100% confident about how it relates to the other options.

upvoted 0 times

...

Irma

7 months ago

I practiced a similar question where session fixation was mentioned as a method, but I can't recall if ARP spoofing was included.

upvoted 0 times

...

Adolph

8 months ago

I think cross-site scripting can definitely lead to session hijacking, but I’m a bit confused about session sidejacking.

upvoted 0 times

...

Laurel

8 months ago

I remember studying session fixation and how it can be used to hijack sessions, but I'm not entirely sure about ARP spoofing.

upvoted 0 times

...

Annice

8 months ago

Okay, I think I've got the key techniques covered - cross-site scripting, session fixation, and session sidejacking. Time to move on to the next question.

upvoted 0 times

...

Kaycee

8 months ago

Session sidejacking sounds like it could be related to session hijacking, so I'll mark that one as well.

upvoted 0 times

...

Portia

8 months ago

Hmm, I'm not sure about ARP spoofing for session hijacking. I'll have to think that one through a bit more.

upvoted 0 times

...

Burma

8 months ago

I'm pretty confident about this one. Cross-site scripting and session fixation are definitely ways to perform session hijacking.

upvoted 0 times

...

Frederica

1 year ago

Session hijacking, eh? Sounds like a real cloak-and-dagger kind of deal. I'd say B and D are the way to go. Time to channel my inner hacker and outsmart the system!

upvoted 0 times

Jordan

12 months ago

User 3: ARP spoofing could also be a good choice for session hijacking.

upvoted 0 times

...

Noah

1 year ago

User 2: Yeah, session fixation and session sidejacking can definitely help with that.

upvoted 0 times

...

Amie

1 year ago

User 1: I think B and D are the best options for session hijacking.

upvoted 0 times

...

Juan

1 year ago

Ooh, session hijacking, the cybersecurity equivalent of a high-stakes heist! A and D sound like the winning combination to me. Let's hope the exam question doesn't have any plot twists.

upvoted 0 times

...

Rodrigo

1 year ago

Hmm, session hijacking, huh? I'm feeling a bit like a spy on a secret mission. C and D definitely seem like the way to go. Time to put on my best James Bond impression!

upvoted 0 times

Sabine

1 year ago

I'll be sure to use my spy skills for session hijacking, just like James Bond!

upvoted 0 times

...

Bette

1 year ago

Make sure to be careful when using those techniques, you don't want to get caught!

upvoted 0 times

...

Sherrell

1 year ago

Yeah, ARP spoofing and session sidejacking are common methods for hijacking sessions.

upvoted 0 times

...

Antonio

1 year ago

I think C and D are the right choices for session hijacking.

upvoted 0 times

...

Theodora

1 year ago

Ah, session hijacking, the hacker's playground! Let's see, I'd say C and D are the real MVPs here. ARP spoofing and session sidejacking - the dynamic duo of online mischief.

upvoted 0 times

...

Veronika

1 year ago

I believe C) ARP spoofing can also be used for session hijacking. It's a common technique.

upvoted 0 times

...

Denise

1 year ago

I agree with Nada. Cross-site scripting can definitely be a method for session hijacking.

upvoted 0 times

...

Nada

1 year ago

I think A) Cross-site scripting can be used for session hijacking.

upvoted 0 times

...