GIAC Exam GPEN Topic 5 Question 64 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 64
Topic #: 5

[All GPEN Questions]

Which of the following statements are true about session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

AIt is used to slow the working of victim's network resources.

BTCP session hijacking is when a hacker takes over a TCP session between two machines.

CUse of a long random number or string as the session key reduces session hijacking.

DIt is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

Show Suggested Answer

Suggested Answer: C

by Delmy at Dec 05, 2024, 08:28 AM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Salena

2 months ago

Session hijacking? More like session 'high-jacking'! Am I right, folks? Hey, at least I'm keeping it light in these trying times.

upvoted 0 times

Julianna

9 days ago

C) Use of a long random number or string as the session key reduces session hijacking.

upvoted 0 times

...

Terina

20 days ago

B) TCP session hijacking is when a hacker takes over a TCP session between two machines.

upvoted 0 times

...

Fanny

1 months ago

A) It is used to slow the working of victim's network resources.

upvoted 0 times

...

Maricela

2 months ago

B and D are no-brainers, but A? Slowing down the network? That's like trying to catch a fish with a stick of dynamite. Not very subtle, is it?

upvoted 0 times

Lisbeth

25 days ago

D) It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

upvoted 0 times

...

Arlyne

1 months ago

C) Use of a long random number or string as the session key reduces session hijacking.

upvoted 0 times

...

Willard

1 months ago

B) TCP session hijacking is when a hacker takes over a TCP session between two machines.

upvoted 0 times

...

Georgiann

1 months ago

A) It is used to slow the working of victim's network resources.

upvoted 0 times

...

Cristal

2 months ago

Wow, this is a tricky one. I'm going to go with B, C, and D. A sounds more like a denial of service attack, not session hijacking.

upvoted 0 times

...

Dylan

2 months ago

I believe C is also true. Using a long random session key can definitely help prevent session hijacking.

upvoted 0 times

...

Vicente

2 months ago

All of these answers seem relevant to session hijacking. C is a good way to mitigate the risk, but you can never be too careful.

upvoted 0 times

Kenia

26 days ago

D) It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

upvoted 0 times

...

Kathrine

30 days ago

C) Use of a long random number or string as the session key reduces session hijacking.

upvoted 0 times

...

Ming

1 months ago

B) TCP session hijacking is when a hacker takes over a TCP session between two machines.

upvoted 0 times

...

Lazaro

1 months ago

A) It is used to slow the working of victim's network resources.

upvoted 0 times

...

Daniel

2 months ago

I agree with you, Ira. TCP session hijacking and unauthorized access are definitely part of session hijacking.

upvoted 0 times

...

Raul

2 months ago

B and D are definitely true. Session hijacking is a real threat and can lead to some serious security issues. I'm not sure about A though, seems a bit off.

upvoted 0 times

...

Ira

3 months ago

I think B and D are true.

upvoted 0 times

...