312-96: Certified Application Security Engineer (Java)Demo

By ECCouncil · Question Mode

QuestionQ33

Understanding Application Security, Threats, and Attacks

Identify the type of attack illustrated in the figure below:

Question Image

  • A SQL injection attack
  • B Parameter/form attack
  • C Directory traversal attack
  • D Session fixation attack
Explanation

Session fixation occurs when an attacker causes a victim to use a session identifier chosen or known by the attacker. Once the victim authenticates with that unchanged session ID, the attacker can reuse it to access the authenticated session.

Community Discussion

No comments yet. Be the first to start the discussion!