MENU
You want to perform an active session hijack against Secure Inc. You have found a target that allows Telnet session. You have also searched an active session due to the high level of traffic on the network. What should you do next?
Suggested Answer: B
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
FR
Franchesca
11 months ago
D is not relevant here, stick to the basics with A or B.
YO
Youlanda
11 months ago
Wait, can you really hijack a session just like that? Sounds too easy.
TR
Tresa
12 months ago
C is a waste of time, Telnet passwords are usually weak anyway.
ZA
Zana
12 months ago
B seems risky, but could work if you know the protocol.
MO
Moira
12 months ago
Definitely go with A, sniffing traffic is key.
WI
William
1 year ago
Changing the MAC address with macoff seems a bit off-topic for this scenario. I don't think that's what we should focus on right now.
EL
Eliz
1 year ago
I'm leaning towards using brutus to crack the telnet password, but I feel like there might be a more stealthy approach.
HE
Herschel
1 year ago
I remember practicing a similar question where guessing sequence numbers was the right move. Maybe that's what I should consider here?
JA
Janna
1 year ago
I think using a sniffer to listen to network traffic makes sense, but I'm not entirely sure if that's the best first step.
MI
Minna
1 year ago
I'm a bit confused on the difference between cloning data and creating a copy using CREATE TABLE AS. I'll need to review those options carefully.
SH
Shenika
1 year ago
Hmm, I'm not totally sure about this one. I guess it could be making sure the data collected is accurate, but I'm not 100% confident on that. I'll have to think it through a bit more.
OC
Octavio
1 year ago
Hmm, this is a tricky one. I'm not totally sure about the differences between the options, but I think implementing microsegmentation or using VLANs could be good ways to isolate the infected systems and prevent the malware from spreading.
PA
Pamella
1 year ago
This is a good question to test our understanding of business architecture. I believe the key benefit is enabling the organization to be more agile and responsive to changing business needs, so I'll go with D.