GIAC Exam GCIH Topic 7 Question 9 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 9
Topic #: 7

[All GCIH Questions]

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.

Original cookie values:

ItemID1=2

ItemPrice1=900

ItemID2=1

ItemPrice2=200

Modified cookie values:

ItemID1=2

ItemPrice1=1

ItemID2=1

ItemPrice2=1

Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.

Which of the following hacking techniques is John performing?

AComputer-based social engineering

BMan-in-the-middle attack

CCross site scripting

DCookie poisoning

Show Suggested Answer

Suggested Answer: C

by Marjory at Dec 23, 2023, 01:10 AM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Haley

4 months ago

Man-in-the-middle attack? Really? That's not even close to what's happening here. This is clearly a cookie poisoning scenario.

upvoted 0 times

Gertude

3 months ago

Yeah, you're right. It's definitely not a man-in-the-middle attack.

upvoted 0 times

...

Aide

3 months ago

I think it's cookie poisoning.

upvoted 0 times

...

Marshall

3 months ago

Yeah, it's definitely cookie poisoning. He's changing the prices before sending them to the server.

upvoted 0 times

...

Annamae

3 months ago

John is trying to manipulate the prices by changing the values in the cookie.

upvoted 0 times

...

Shawna

4 months ago

I'm not sure, but it sounds like Cookie poisoning to me too.

upvoted 0 times

...

Truman

4 months ago

I agree with Mila, changing the prices in the cookie is definitely Cookie poisoning.

upvoted 0 times

...

Yong

4 months ago

I'd go with option D, cookie poisoning. Changing the prices in the cookie is a pretty clever way to get a good deal, but it's not exactly ethical.

upvoted 0 times

Zona

3 months ago

User4: Yup, that's the hacking technique John is using.

upvoted 0 times

...

Raymon

3 months ago

User3: I think it's called cookie poisoning, right?

upvoted 0 times

...

Wava

3 months ago

User2: Yeah, it's definitely not ethical.

upvoted 0 times

...

Maxima

4 months ago

User1: That's sneaky, changing the prices in the cookie like that.

upvoted 0 times

...

Mila

4 months ago

I think John is performing Cookie poisoning.

upvoted 0 times

...

Nydia

4 months ago

This sounds like a classic case of cookie poisoning, where the attacker modifies the values in the cookie to manipulate the prices. It's a sneaky way to get a discount!

upvoted 0 times

...