MENU
Which of the following statements are true about session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: C
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
YU
Yuonne
10 months ago
D is spot on, it's all about exploiting valid sessions.
RA
Raymon
11 months ago
Wait, people actually use session hijacking? That's wild!
AA
Aaron
11 months ago
A is just wrong, session hijacking isn't about slowing networks.
SH
Sherman
11 months ago
C makes sense, but A? Not so sure about that.
HY
Hyman
11 months ago
B and D are definitely true.
NA
Nada
11 months ago
D sounds accurate to me. Exploiting a valid session for unauthorized access is exactly what session hijacking is about. I think that's a solid choice.
JO
Josefa
12 months ago
C seems plausible, but I can't recall if a long random string is enough to completely prevent session hijacking. I feel like there are more factors involved.
OL
Olive
12 months ago
I think B is definitely correct. TCP session hijacking is about taking over an active session, right? That sounds familiar.
NI
Nidia
12 months ago
I remember discussing session hijacking in class, but I'm not sure if A is really true. Slowing down network resources doesn't seem like the main goal.
CA
Carin
12 months ago
I think using a long random session key, as mentioned in option C, is a good way to prevent session hijacking. I'll make sure to mark that one as true.
TY
Ty
12 months ago
Okay, I know session hijacking involves taking over an existing session, so option B sounds right. And option D seems to capture the essence of what session hijacking is.
KR
Krissy
12 months ago
Hmm, I'm a bit unsure about option A. Slowing down network resources doesn't seem like a typical goal of session hijacking. I'll need to think this through carefully.
CE
Cecilia
1 year ago
This question looks straightforward. I'll focus on understanding the key concepts of session hijacking and how to identify the true statements.
SA
Salena
1 year ago
Session hijacking? More like session 'high-jacking'! Am I right, folks? Hey, at least I'm keeping it light in these trying times.
JU
Julianna
1 year ago
C) Use of a long random number or string as the session key reduces session hijacking.
TE
Terina
1 year ago
B) TCP session hijacking is when a hacker takes over a TCP session between two machines.
FA
Fanny
1 year ago
A) It is used to slow the working of victim's network resources.
MA
Maricela
1 year ago
B and D are no-brainers, but A? Slowing down the network? That's like trying to catch a fish with a stick of dynamite. Not very subtle, is it?
LI
Lisbeth
1 year ago
D) It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.
AR
Arlyne
1 year ago
C) Use of a long random number or string as the session key reduces session hijacking.
WI
Willard
1 year ago
B) TCP session hijacking is when a hacker takes over a TCP session between two machines.
GE
Georgiann
1 year ago
A) It is used to slow the working of victim's network resources.
CR
Cristal
1 year ago
Wow, this is a tricky one. I'm going to go with B, C, and D. A sounds more like a denial of service attack, not session hijacking.
DY
Dylan
1 year ago
I believe C is also true. Using a long random session key can definitely help prevent session hijacking.
VI
Vicente
2 years ago
All of these answers seem relevant to session hijacking. C is a good way to mitigate the risk, but you can never be too careful.
KE
Kenia
1 year ago
D) It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.
KA
Kathrine
1 year ago
C) Use of a long random number or string as the session key reduces session hijacking.
MI
Ming
1 year ago
B) TCP session hijacking is when a hacker takes over a TCP session between two machines.
LA
Lazaro
1 year ago
A) It is used to slow the working of victim's network resources.
DA
Daniel
2 years ago
I agree with you, Ira. TCP session hijacking and unauthorized access are definitely part of session hijacking.
RA
Raul
2 years ago
B and D are definitely true. Session hijacking is a real threat and can lead to some serious security issues. I'm not sure about A though, seems a bit off.
IR
Ira
2 years ago
I think B and D are true.