MENU
Which of the following statements are true about session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, C, D
Get Premium GCIH Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
TY
Ty
1 month ago
Yeah, session hijacking is serious. We need to understand it well.
MA
Margarita
1 month ago
I feel like A, C, and D are the main points we should focus on.
MA
Ma
1 month ago
B seems off. It’s not really about slowing down networks.
ST
Stevie
2 months ago
C sounds right too. Taking over TCP sessions is a big deal.
DY
Dyan
2 months ago
Agreed! D is also true. It’s all about exploiting valid sessions.
YV
Yvette
2 months ago
I think A is definitely true. Random session keys help a lot.
DE
Delbert
2 months ago
Wait, I thought session hijacking was just about stealing cookies, not all this other stuff!
EM
Emilio
2 months ago
B) doesn't sound right, it's more about stealing sessions than slowing down networks.
FL
Flo
2 months ago
D) is the main idea behind session hijacking, no doubt.
LE
Leslie
3 months ago
C) is spot on, that's how TCP hijacking works.
LE
Lenny
3 months ago
A) is definitely true, long random keys help a lot!
LE
Lemuel
3 months ago
D definitely sounds right; I think it captures the essence of what session hijacking is all about.
LE
Lenna
3 months ago
C seems correct to me because I recall TCP session hijacking specifically involves taking over an active session.
TE
Teddy
3 months ago
I'm not entirely sure about B; it sounds familiar, but I thought session hijacking was more about gaining access rather than slowing down resources.
PA
Paris
4 months ago
I remember studying that using a long random string for session keys can help reduce the risk of hijacking, so I think A is true.