GIAC Exam GPEN Topic 5 Question 48 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 48
Topic #: 5

[All GPEN Questions]

Which of the following can be used to perform session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

ACross-site scripting

BARP spoofing

CSession sidejacking

DSession fixation

Show Suggested Answer

Suggested Answer: D

by Martin at May 20, 2024, 03:37 AM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Felix

1 months ago

Session hijacking? I prefer to hijack my neighbor's Netflix account, much less jail time involved.

upvoted 0 times

...

Alaine

1 months ago

Cross-site scripting, ARP spoofing, session sidejacking, and session fixation? Looks like a buffet of hacking techniques to me.

upvoted 0 times

Leana

2 days ago

B) ARP spoofing

upvoted 0 times

...

Amira

5 days ago

A) Cross-site scripting

upvoted 0 times

...

Maile

1 months ago

All the answers look legit, but I'm going with the classic - session fixation. It's the one that screams 'I'm a security expert' the loudest.

upvoted 0 times

...

Mabel

1 months ago

Session hijacking? I'd rather hijack a plane, at least that's a bit more exciting.

upvoted 0 times

Lemuel

2 days ago

D) Session fixation

upvoted 0 times

...

Leslie

3 days ago

C) Session sidejacking

upvoted 0 times

...

Goldie

16 days ago

B) ARP spoofing

upvoted 0 times

...

Ceola

1 months ago

A) Cross-site scripting

upvoted 0 times

...

Ligia

2 months ago

ARP spoofing and session sidejacking? Sounds like a hacker's dream team!

upvoted 0 times

Keva

3 days ago

It's important to be aware of these techniques to protect against session hijacking attacks.

upvoted 0 times

...

Charlie

4 days ago

Session fixation is another method that can be used for session hijacking.

upvoted 0 times

...

Dudley

16 days ago

Session fixation is another method that can be used for session hijacking.

upvoted 0 times

...

Billy

18 days ago

Cross-site scripting can also be used for session hijacking.

upvoted 0 times

...

Latosha

18 days ago

Cross-site scripting can also be used for session hijacking.

upvoted 0 times

...

Lilli

24 days ago

Yes, ARP spoofing and session sidejacking are commonly used by hackers.

upvoted 0 times

...

Truman

1 months ago

Yes, ARP spoofing and session sidejacking are both commonly used by hackers.

upvoted 0 times

...

Arminda

2 months ago

I believe D, session fixation, can also be used for session hijacking. It's important to be aware of all possible methods.

upvoted 0 times

...

Cordelia

2 months ago

I agree with Cortney. Cross-site scripting, ARP spoofing, and session sidejacking are common methods for session hijacking.

upvoted 0 times

...

Cortney

3 months ago

I think A, B, and C can be used for session hijacking.

upvoted 0 times

...