MENU
In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?
Suggested Answer: B
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
EL
Elliott
11 months ago
Session fixation is a different issue, so B it is!
MA
Martha
11 months ago
Wait, are we sure it's not C? Sounds fishy.
SH
Sheron
12 months ago
Agreed, B is the right answer!
BR
Brandon
12 months ago
I thought ARP spoofing was the main culprit here?
AL
Allene
12 months ago
Definitely B, session sidejacking is all about that cookie theft!
CO
Corazon
1 year ago
I'm leaning towards session sidejacking because it specifically mentions stealing session cookies, but I could be mixing it up with another type of attack.
DY
Dyan
1 year ago
Session fixation sounds familiar, but I can't recall if it involves packet sniffing. I feel like I need to review that topic again.
EA
Earleen
1 year ago
I think this might be related to session hijacking, but I'm not sure if it's specifically session sidejacking or something else.
JU
Justine
1 year ago
I remember practicing a question about ARP spoofing, but I don't think that's the right answer here since it doesn't directly involve session cookies.
MA
Margurite
1 year ago
Hmm, I'm a bit confused about the different log levels and what exactly needs to be logged. I'll need to carefully review the policy file examples and make sure I understand the requirements before making any changes.
LO
Lonny
1 year ago
I'm not entirely sure about this one. The question mentions a few different types of scans, and I'm not completely familiar with the differences between them. I'll have to think this through carefully and review my notes on network scanning techniques.
TR
Troy
1 year ago
I'm not totally confident, but my initial thought is that the statement is True. Lower net retention would lead to more unpredictability in the reserves, so the variability should increase. I'll double-check my understanding before answering.
MI
Mickie
1 year ago
This looks pretty straightforward. I'm pretty sure Python, Perl, and JavaScript are the right answers.